Details
-
Bug
-
Status: Open (View Workflow)
-
Major
-
Resolution: Unresolved
-
10.6, 11.4, 12.1.2
-
None
-
None
Description
The `wsrep_sst_rsync` and `wsrep_sst_mariabackup` scripts accept values `VERIFY_CA` and `VERIFY_SST` options for the `[sst] ssl-mode` setting.
With the rsync script both lead to different TLS settings, but the mariabackup script does not actually distinguish between the two and just checks for
"ssl-mode starts with VERIFY*"
so that the behavior will actually be exactly the same for both distinct VERIFY options.