Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-18050

Port encrypt=4 from xtrabackup-v2 to mariabackup for SSTs

Details

    Description

      I can see that the xtrabackup-v2 SST script has an encrypt=4 option:

      https://github.com/MariaDB/server/blob/312de43f40e221096b5565f6f4999eaadae09ef4/scripts/wsrep_sst_xtrabackup-v2.sh#L371

      The mariabackup SST script does not appear to have this option:

      https://github.com/MariaDB/server/blob/312de43f40e221096b5565f6f4999eaadae09ef4/scripts/wsrep_sst_mariabackup.sh#L252

      Percona describes this option as:

      Set encrypt=4 for SST encryption with SSL files generated by MySQL. This is the recommended mode.

      Considering that you have all three necessary files:

      [sst]
      encrypt=4
      ssl-ca=ca.pem
      ssl-cert=server-cert.pem
      ssl-key=server-key.pem

      https://www.percona.com/doc/percona-xtradb-cluster/5.7/manual/xtrabackup_sst.html#encrypt

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-9436 When using xtrabackup-v2 SST, built-in xtrabackup SSL fails on CentOS/RHEL 6

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-25359 Improve mariabackup SST script compliance with native MariaDB SSL practicies

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-26360 Using hostnames for MariaBackup SSTs breaks certificate validation with encrypt=3

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            GeoffMontee Geoff Montee (Inactive) created issue -
            GeoffMontee Geoff Montee (Inactive) made changes -
            Field Original Value New Value
            Assignee Jan Lindström [ jplindst ]
            GeoffMontee Geoff Montee (Inactive) made changes -
            GeoffMontee Geoff Montee (Inactive) made changes -
            Assignee Jan Lindström [ jplindst ] Seppo Jaakola [ seppo ]
            GeoffMontee Geoff Montee (Inactive) made changes -
            jplindst Jan Lindström (Inactive) made changes -
            Assignee Seppo Jaakola [ seppo ] Julius Goryavsky [ sysprg ]
            sysprg Julius Goryavsky made changes -
            Fix Version/s 10.2 [ 14601 ]
            sysprg Julius Goryavsky made changes -
            Status Open [ 1 ] Confirmed [ 10101 ]
            sysprg Julius Goryavsky made changes -
            Status Confirmed [ 10101 ] In Progress [ 3 ]
            sysprg Julius Goryavsky made changes -
            sysprg Julius Goryavsky made changes -
            Fix Version/s 10.8.0 [ 26800 ]
            Fix Version/s 10.7.1 [ 26120 ]
            Fix Version/s 10.6.4 [ 26033 ]
            Fix Version/s 10.5.12 [ 26025 ]
            Fix Version/s 10.4.21 [ 26030 ]
            Fix Version/s 10.3.31 [ 26028 ]
            Fix Version/s 10.2.40 [ 26027 ]
            Fix Version/s 10.2 [ 14601 ]
            sysprg Julius Goryavsky made changes -
            issue.field.resolutiondate 2021-11-28 01:22:02.0 2021-11-28 01:22:02.079
            sysprg Julius Goryavsky made changes -
            Resolution Fixed [ 1 ]
            Status In Progress [ 3 ] Closed [ 6 ]
            serg Sergei Golubchik made changes -
            Workflow MariaDB v3 [ 91353 ] MariaDB v4 [ 133800 ]

            People

              sysprg Julius Goryavsky
              GeoffMontee Geoff Montee (Inactive)
              Votes:
              2 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.