Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-40998

Galera error about TLS certificate with spaces in CN is vague

    XMLWordPrintable

Details

    • Bug
    • Status: Open (View Workflow)
    • Major
    • Resolution: Unresolved
    • 10.11.19
    • None
    • Galera SST
    • None
    • Rocky Linux 8

    Description

      A space in a hostname is illegal but those can still appear in TLS certificates as the CN value. The error message for this case is extremely vague and gives no indication that the root cause of the failing SST is the TLS certificate. For a Galera layman like myself, Bad remote auth string sounds like wsrep_sst_auth being the problem which was not the case.

      Sep 01 21:06:15 vm1-galera-000 mariadbd[80670]: 2026-09-01 21:06:15 2 [Warning] WSREP: Illegal character in variable: 32 ( ).
      Sep 01 21:06:15 vm1-galera-000 mariadbd[80670]: 2026-09-01 21:06:15 2 [ERROR] WSREP: Bad remote auth string. SST canceled.
      

      Attachments

        Activity

          People

            Unassigned Unassigned
            markus makela markus makela
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.