Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-34738

Upgrade 10.11 -> 11.4 fails when wsrep_provider_options socket.ssl_cipher is set

Details

    Description

      After upgrading I couldn't get the cluster running anymore.
      Logs say:

      WSREP: Failed to initialize parameter 'socket.ssl_cipher', value AES256-SHA , flags (read_only | bool)

      The setting appears to have a valid value and this config (see attached file) worked in 10.11.
      If I remove socket.ssl_cipher from the wsrep_provider_options completely, everything starts working again, but this is obviously not a desirable solution.

      It appears I'm not the only one experiencing this issue:
      https://github.com/codership/galera/issues/656

      Attachments

        Activity

          tvdijen Tim van Dijen created issue -
          tvdijen Tim van Dijen made changes -
          Field Original Value New Value
          Description After upgrading I couldn't get the cluster running anymore.
          Logs say:

          {{WSREP: Failed to initialize parameter 'socket.ssl_cipher', value AES256-SHA , flags (read_only | bool)}}

          The setting appears to have a valid value and this config (see attached file) worked in 10.11.
          If I remove socket.ssl_cipher from the wsrep_provider_options completely, everything starts working again, but this is obviously not a desirable solution.
          After upgrading I couldn't get the cluster running anymore.
          Logs say:

          {{WSREP: Failed to initialize parameter 'socket.ssl_cipher', value AES256-SHA , flags (read_only | bool)}}

          The setting appears to have a valid value and this config (see attached file) worked in 10.11.
          If I remove socket.ssl_cipher from the wsrep_provider_options completely, everything starts working again, but this is obviously not a desirable solution.

          It appears I'm not the only one experiencing this issue:
          https://github.com/codership/galera/issues/656
          JIraAutomate JiraAutomate made changes -
          Fix Version/s 10.5 [ 23123 ]
          Fix Version/s 10.6 [ 24028 ]
          tvdijen Tim van Dijen added a comment -

          It would be really helpful to know if this is in fact a regression, or me being stupid ... Thank you

          tvdijen Tim van Dijen added a comment - It would be really helpful to know if this is in fact a regression, or me being stupid ... Thank you
          serg Sergei Golubchik made changes -
          Assignee Jan Lindström [ JIRAUSER53125 ]
          janlindstrom Jan Lindström made changes -
          Fix Version/s 11.4 [ 29301 ]
          Fix Version/s 10.5 [ 23123 ]
          Fix Version/s 10.6 [ 24028 ]
          janlindstrom Jan Lindström made changes -
          Status Open [ 1 ] In Progress [ 3 ]
          janlindstrom Jan Lindström made changes -
          Labels regression confirmed regression
          janlindstrom Jan Lindström made changes -
          Priority Major [ 3 ] Critical [ 2 ]
          janlindstrom Jan Lindström made changes -
          Labels confirmed regression confirmed galera-26.4.21 regression

          Fixed on Galera library 26.4.21 (not yet released)

          https://github.com/MariaDB/server/pull/3630

          janlindstrom Jan Lindström added a comment - Fixed on Galera library 26.4.21 (not yet released) https://github.com/MariaDB/server/pull/3630
          janlindstrom Jan Lindström made changes -
          janlindstrom Jan Lindström made changes -
          Assignee Jan Lindström [ JIRAUSER53125 ] Julius Goryavsky [ sysprg ]
          Status In Progress [ 3 ] In Review [ 10002 ]
          sysprg Julius Goryavsky made changes -
          Summary Upgrade 10.11>11.4 fails when wsrep_provider_options socket.ssl_cipher is set Upgrade 10.11 -> 11.4 fails when wsrep_provider_options socket.ssl_cipher is set
          sysprg Julius Goryavsky added a comment - janlindstrom Thanks, the fix has been merged with the main branch: https://github.com/MariaDB/server/commit/81e507718574fa8683a796628156283892d3bb87
          sysprg Julius Goryavsky made changes -
          Status In Review [ 10002 ] Stalled [ 10000 ]
          sysprg Julius Goryavsky made changes -
          Status Stalled [ 10000 ] In Progress [ 3 ]
          sysprg Julius Goryavsky made changes -
          Component/s Galera [ 10124 ]
          Fix Version/s 10.5.29 [ 29996 ]
          Fix Version/s 11.4 [ 29301 ]
          Resolution Fixed [ 1 ]
          Status In Progress [ 3 ] Closed [ 6 ]

          Don't forget that the fix also requires updating the galera library to 26.4.21 and also wait until the fix is ​​migrated to 11.4+ (it has been tested for 11.4 too, but not the main branch yet).

          sysprg Julius Goryavsky added a comment - Don't forget that the fix also requires updating the galera library to 26.4.21 and also wait until the fix is ​​migrated to 11.4+ (it has been tested for 11.4 too, but not the main branch yet).
          sysprg Julius Goryavsky made changes -
          Fix Version/s 10.6.22 [ 29997 ]
          Fix Version/s 10.11.12 [ 29998 ]
          Fix Version/s 11.4.6 [ 29999 ]
          serg Sergei Golubchik made changes -
          Labels confirmed galera-26.4.21 regression galera-26.4.21 regression

          People

            sysprg Julius Goryavsky
            tvdijen Tim van Dijen
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.