Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-28428

Master_SSL_Crl shows Master_SSL_CA value in SHOW SLAVE STATUS output

Details

    Description

      When running SHOW SLAVE STATUS on a slave set up to use SSL/TLS encryption to fetch binlog events from the master the Master_SSL_Crl field in the status output wrongly shows the same value as Master_SSL_CA.

      E.g. set up slave with:

      CHANGE MASTER TO 
         MASTER_HOST='master',
      		 
         MASTER_USER='repl',
      		 
         MASTER_PASSWORD='...',
      		 
         MASTER_USE_GTID=slave_pos,
      		 
         MASTER_SSL=1,
      		 
         MASTER_SSL_CERT = '/vagrant/files/x509/slave-cert.pem',
      		 
         MASTER_SSL_KEY = '/vagrant/files/x509/slave-key.pem',
      		 
         MASTER_SSL_CA = '/vagrant/files/x509/ca-cert.pem',
      		 
         MASTER_SSL_CRL = '/vagrant/files/x509/crl.pem';

      gives this on SHOW SLAVE STATUS:

      MariaDB [(none)]> show slave status\G
      		 
      *************************** 1. row ***************************
      		 
                      Slave_IO_State: Waiting for master to send event
      		 
                         Master_Host: master
      		 
                         Master_User: repl
      		 
       ...
      		 
                  Master_SSL_Allowed: Yes
      		 
                  Master_SSL_CA_File: /vagrant/files/x509/ca-cert.pem
      		 
                  Master_SSL_CA_Path: 
                     Master_SSL_Cert: /vagrant/files/x509/slave-1-cert.pem
      		 
                   Master_SSL_Cipher: 
                      Master_SSL_Key: /vagrant/files/x509/slave-1-key.pem
      		 
               Seconds_Behind_Master: 0
      		 
       Master_SSL_Verify_Server_Cert: No
      		 
      ...
      		 
                      Master_SSL_Crl: /vagrant/files/x509/ca-cert.pem
      		 
                  Master_SSL_Crlpath:

      The master.info file correctly shows the file name given to Master_SSL_Crl in CHANGE MASTER TO though.

      I tried to find in the code where this goes wrong, but all uses of the ssl_crl field in replication related code look correct to me ... :o

      Attachments

        Activity

          People

            serg Sergei Golubchik
            hholzgra Hartmut Holzgraefe
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.