Comment 1 for bug 1235244

Revision history for this message
Jay Janssen (jay-janssen) wrote :

To clarify, we should be able to configure SST to encrypt just like Galera:

wsrep_provider_options = "socket.ssl_cert=/etc/mysql/cert.pem; socket.ssl_key=/etc/mysql/key.pem"

[ssl]
encrypt=3
tkey=/etc/mysql/key.pem
tcert=/etc/mysql/cert.pem

or similar.

Doc should be updated to reflect that this (like Galera currently) does not provide certificate validation.