pt-table-sync render "Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client is deprecated" message
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Percona Toolkit moved to https://jira.percona.com/projects/PT |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
Running "pt-table-sync --print SOURCEDSN TARGETDSN" on a default RHEL 7 install renders this message:
*******
Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client
is deprecated! Please set SSL_verify_mode to SSL_VERIFY_PEER
together with SSL_ca_
If you really don't want to verify the certificate and keep the
connection open to Man-In-The-Middle attacks please set
SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.
*******
at /usr/bin/
This is what's on line 8607 and onwards:
if ( $scheme eq 'https') {
or die(qq/SSL connection failed for $host\n/);
if ( $self->
}
else {
my $fh = $self->{fh};
}
}
$ pt-table-sync --version
pt-table-sync 2.2.17
$ cat /etc/*release
NAME="Red Hat Enterprise Linux Server"
VERSION="7.2 (Maipo)"
$ rpm -qi mariadb101u-server
Name : mariadb101u-server
Epoch : 1
Version : 10.1.14
Release : 2.ius.el7
https:/
For reference I also noticed this issue being reported for XtraBackup (https:/
Changed in percona-toolkit: | |
status: | Incomplete → New |
tags: | added: pt104 |
Suggested fix which seems to alleviate this problem for me:
$ pt-table-sync --version
pt-table-sync 2.2.18
$ diff /usr/bin/ pt-table- sync.bak160716 /usr/bin/ pt-table- sync :SSL->start_ SSL($self- >{fh}); :SSL->start_ SSL($self- >{fh}, SSL_verify_mode => 0x01);
8629c8629,8631
< IO::Socket:
---
> # 0x01 corresponds to SSL_VERIFY_PEER
> IO::Socket: