Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

garbd: document that socket.ssl=yes option is needed #622

Open
mariadb-ClaudioNanni opened this issue Aug 9, 2022 · 0 comments
Open

garbd: document that socket.ssl=yes option is needed #622

mariadb-ClaudioNanni opened this issue Aug 9, 2022 · 0 comments

Comments

@mariadb-ClaudioNanni
Copy link

In recent Galera 4 versions, garbd silently ignores SSL options if you don't specify socket.ssl=yes
There is no indication whatsoever in the log that ssl options are being ignored.
I see this is a recurring problem causing a lot of time waste.

Ignored SSL options:

2022-08-09 09:44:38.731 INFO: protonet asio version 0
2022-08-09 09:44:38.731 INFO: Using CRC-32C for message checksums.
2022-08-09 09:44:38.731 INFO: backend: asio

Not Ignored SSL options:

2022-08-09 09:44:38.731 INFO: protonet asio version 0
2022-08-09 09:44:38.731 INFO: Using CRC-32C for message checksums.
*** 2022-08-09 09:44:38.731 INFO: initializing ssl context
*** 2022-08-09 09:44:38.731 INFO: SSL cipher list set to 'ECDHE-RSA-AES256-GCM-SHA384'
2022-08-09 09:44:38.731 INFO: backend: asio

Maybe it should be documented here:
https://galeracluster.com/library/documentation/arbitrator.html

As far as I can tell the change that made the difference is this one:
43f29e6

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant