Assumes self-signed cert when using SSL; how to specify a cert authority not described in documentation

Bug #1265105 reported by David Aikema
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
MySQL patches by Codership
New
Undecided
Unassigned

Bug Description

When configuring wsrep_provider_options to use an SSL certificate, the documentation at http://www.codership.com/wiki/doku.php?id=galera_parameters does not list an entry to define a certificate authority.

I'd assumed that that meant that as long as SSL was happy verifying certificates (i.e. a system-level certificate installation) that I wouldn't have problems with my certificate verification. Eventually I discovered that in my wsrep_provider_options viewed when the server was active, there was an implicity assumption that a self-signed cert was being used - i.e. the certificate authority was being set to the same file as the certificate itself.

Inserting in the documentation at http://www.codership.com/wiki/doku.php?id=galera_parameters that socket.ssl_ca can be used to specify a certificate authority would seem helpful.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.