Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-21730

Improve TLS/SSL error reporting

Details

    Description

      Now when Galera node can not join the cluster becuase of some problem with certificates we get just this kind of error messages:

      2020-02-10 15:01:01 0 [Note] WSREP: gcomm: connecting to group 'my_wsrep_cluster', peer 'node1:4567,node2:4567,node3:4567'
      		 
      2020-02-10 15:01:01 0 [ERROR] WSREP: handshake with remote endpoint ssl://a.b.c.d:4567 failed: asio.ssl:336134278: 'certificate verify failed' ( 336134278: 'error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed')
      		 
      ...

      It would be useful to get more detailed explanation about the problem. All elements of certificates must be checked and if one element fails (wrong CN, something else, in root or in one of intermediate certificates, etc), it must be reported what it is.

      This would help a lot in troubleshooting.

      As a side note, it would be useful to get node names and not their resolved IP-addresses in the messages.

      Attachments

        Issue Links

          is part of

          Task - A task that needs to be done. MDEV-22131 allow transition from unencrypted to TLS cluster communication without cluster downtime

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            Transition Time In Source Status Execution Times
            Seppo Jaakola made transition -
            Open In Progress
            		447d 18m 1
            Seppo Jaakola made transition -
            In Progress Stalled
            		4m 42s 1
            Seppo Jaakola made transition -
            Stalled In Review
            		2m 30s 1
            Jan Lindström (Inactive) made transition -
            In Review Closed
            		21d 18h 50m 1

            People

              jplindst Jan Lindström (Inactive)
              valerii Valerii Kravchuk
              Votes:
              3 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.