To clarify, we should be able to configure SST to encrypt just like Galera:
wsrep_provider_options = "socket.ssl_cert=/etc/mysql/cert.pem; socket.ssl_key=/etc/mysql/key.pem"
[ssl] encrypt=3 tkey=/etc/mysql/key.pem tcert=/etc/mysql/cert.pem
or similar.
Doc should be updated to reflect that this (like Galera currently) does not provide certificate validation.
To clarify, we should be able to configure SST to encrypt just like Galera:
wsrep_provider_ options = "socket. ssl_cert= /etc/mysql/ cert.pem; socket. ssl_key= /etc/mysql/ key.pem"
[ssl] mysql/key. pem etc/mysql/ cert.pem
encrypt=3
tkey=/etc/
tcert=/
or similar.
Doc should be updated to reflect that this (like Galera currently) does not provide certificate validation.