Added properties 'ssl_type' and 'ssl_cipher' to mysql_user to enable …

[reuterbal]

…SSL encrypted authentication.

Added two properties 'ssl_type' and 'ssl_cipher' to mysql_user to allow specifying the required SSL method for the user to log in.
'ssl_type' can take the values '', 'ANY', 'SPECIFIED', or 'X509', which results in no requirement for SSL (''), any SSL-based authentication ('ANY'), SSL-based authentication using a specific cipher ('SPECIFIED'), or authentication using a signed client certificate ('X509').
'ssl_cipher' allows to provide the cipher and requires ssl_type == 'SPECIFIED'.
This is in compliance with the MySQL GRANT syntax, cf. e.g. https://dev.mysql.com/doc/refman/5.6/en/grant.html

The additional properties and corresponding SQL-statements for X509-options are not yet implemented.

Examples:

mysql_user { 'someuser@%':
  ensure        => 'present',
  password_hash => '*F3A2A51A9B0F2BE2468926B4132313728C250DBF',
  ssl_type      => 'ANY'
}

generates

  GRANT USAGE ON *.* TO 'someuser'@'%' REQUIRE SSL;

for an existing user or inserts the REQUIRE-clause in the GRANT command of the create-method for a new user.

mysql_user { 'someuser@%':
  ensure        => 'present',
  password_hash => '*F3A2A51A9B0F2BE2468926B4132313728C250DBF',
  ssl_type      => 'SPECIFIED',
  ssl_cipher    => 'EDH-RSA-DES-CBC3-SHA'
}

generates

  GRANT USAGE ON *.* TO 'someuser'@'%' REQUIRE SSL;
  GRANT USAGE ON *.* TO 'someuser'@'%' REQUIRE CIPHER 'EDH-RSA-DES-CBC3-SHA';

for an existing user or inserts the REQUIRE-clause connected by AND in the GRANT command of the create-method for a new user.

[igalic]

i don't understand why you're validating this here, rather than in the type.

[igalic]

@reuterbal thank you very much for this new feature
however, as a new feature it will need documentation
as well as an upgrade to the tests, which are failing now

[igalic]

will this need an annotation like PLUGIN? since when has that been available?

[bmjen]

Thanks for the contribution @reuterbal. Have you had a chance to look at or address the feedback provided by @igalic?

[HelenCampbell]

Hey @reuterbal , thank you for your contribution! We would be interested in having this feature, would you be willing to make the changes that @igalic has suggested?

[jonnytdevops]

Hi There

Thank you for your efforts.

I'm closing this PR due to inactivity. Feel free to open a new PR with the comments addressed if you would still like this feature merged.

Thanks!