Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-18050

Port encrypt=4 from xtrabackup-v2 to mariabackup for SSTs

Details

    Description

      I can see that the xtrabackup-v2 SST script has an encrypt=4 option:

      https://github.com/MariaDB/server/blob/312de43f40e221096b5565f6f4999eaadae09ef4/scripts/wsrep_sst_xtrabackup-v2.sh#L371

      The mariabackup SST script does not appear to have this option:

      https://github.com/MariaDB/server/blob/312de43f40e221096b5565f6f4999eaadae09ef4/scripts/wsrep_sst_mariabackup.sh#L252

      Percona describes this option as:

      Set encrypt=4 for SST encryption with SSL files generated by MySQL. This is the recommended mode.

      Considering that you have all three necessary files:

      [sst]
      encrypt=4
      ssl-ca=ca.pem
      ssl-cert=server-cert.pem
      ssl-key=server-key.pem

      https://www.percona.com/doc/percona-xtradb-cluster/5.7/manual/xtrabackup_sst.html#encrypt

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-9436 When using xtrabackup-v2 SST, built-in xtrabackup SSL fails on CentOS/RHEL 6

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-25359 Improve mariabackup SST script compliance with native MariaDB SSL practicies

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-26360 Using hostnames for MariaBackup SSTs breaks certificate validation with encrypt=3

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            Transition Time In Source Status Execution Times
            Julius Goryavsky made transition -
            Open Confirmed
            		1061d 4h 49m 1
            Julius Goryavsky made transition -
            Confirmed In Progress
            		7s 1
            Julius Goryavsky made transition -
            In Progress Closed
            		11d 20h 46m 1

            People

              sysprg Julius Goryavsky
              GeoffMontee Geoff Montee (Inactive)
              Votes:
              2 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.