Details
-
Bug
-
Status: Closed (View Workflow)
-
Blocker
-
Resolution: Fixed
-
10.6(EOL), 10.11, 12.3
-
None
-
Related to install and upgrade
-
stunnel is a dependency of the Galera rsync SST mechanism; it is optional until a TLS configuration is applied for the SST mechanism; stunnel is now a recommended package of the MariaDB-server RPM and the mariadb-server DEB
Description
stunnel has been an option with the galera rsync sst mechanism for at least 8 years.
Since MDEV-28233 corrected a silent fallback to unencrypted in the absence of a stunnel being available, its quite possible that users in this release will suddenly discover a sst breaking
Attachments
Issue Links
- is caused by
-
MDEV-28233 rsync SST script silently runs unencrypted if stunnel is not installed
-
- Closed
-