When using xtrabackup-v2 SST, built-in xtrabackup SSL fails on CentOS/RHEL 6

xbcrypt:xb_crypt_read_chunk: wrong chunk magic at offset 0x0.

[mariadb-10.0]

binlog_format=ROW

default_storage_engine=InnoDB

innodb_autoinc_lock_mode=2

wsrep_provider=/usr/lib64/galera/libgalera_smm.so

wsrep_cluster_address="gcomm://172.31.33.135,172.31.32.117,172.31.32.116"

wsrep_sst_auth="sst:password"

wsrep_sst_method=xtrabackup-v2

$ openssl rand -base64 24

d8PtcnuenpRb1IGgPISDgmRrhLxwTKsE

encrypt=1

encrypt-key="d8PtcnuenpRb1IGgPISDgmRrhLxwTKsE"

encrypt-algo="AES256"

160119 18:41:30 [Note] WSREP: Running: 'wsrep_sst_xtrabackup-v2 --role 'joiner' --address '172.31.32.116' --datadir '/var/lib/mysql/' --defaults-file '/etc/my.cnf' --defaults-group-suffix '' --parent '2422'  '' '

WSREP_SST: [INFO] Streaming with xbstream (20160119 18:41:30.472)

WSREP_SST: [INFO] Using socat as streamer (20160119 18:41:30.473)

WSREP_SST: [INFO] Stale sst_in_progress file: /var/lib/mysql//sst_in_progress (20160119 18:41:30.476)

WSREP_SST: [INFO] Xtrabackup based encryption enabled in my.cnf - Supported only from Xtrabackup 2.1.4 (20160119 18:41:30.490)

WSREP_SST: [INFO] Evaluating timeout -s9 100 socat -u TCP-LISTEN:4444,reuseaddr stdio |  xbcrypt --encrypt-algo=AES256 --encrypt-key=d8PtcnuenpRb1IGgPISDgmRrhLxwTKsE -d | xbstream -x; RC=( ${PIPESTATUS[@]} ) (20160119 18:41:30.496)

160119 18:41:30 [Note] WSREP: Prepared SST request: xtrabackup-v2|172.31.32.116:4444/xtrabackup_sst//1

160119 18:41:30 [Note] WSREP: wsrep_notify_cmd is not defined, skipping notification.

160119 18:41:30 [Note] WSREP: REPL Protocols: 7 (3, 2)

160119 18:41:30 [Note] WSREP: Service thread queue flushed.

160119 18:41:30 [Note] WSREP: Assign initial position for certification: 5, protocol version: 3

160119 18:41:30 [Note] WSREP: Service thread queue flushed.

160119 18:41:30 [Warning] WSREP: Failed to prepare for incremental state transfer: Local state UUID (00000000-0000-0000-0000-000000000000) does not match group state UUID (fbeb045d-b94f-11e5-8504-4ae80b892690): 1 (Operation not permitted)

         at galera/src/replicator_str.cpp:prepare_for_IST():456. IST will be unavailable.

160119 18:41:30 [Note] WSREP: Member 1.0 (ip-172-31-32-116.us-west-2.compute.internal) requested state transfer from '*any*'. Selected 0.0 (ip-172-31-32-117.us-west-2.compute.internal)(SYNCED) as donor.

160119 18:41:30 [Note] WSREP: Shifting PRIMARY -> JOINER (TO: 5)

160119 18:41:30 [Note] WSREP: Requesting state transfer: success, donor: 0

WSREP_SST: [INFO] WARNING: Stale temporary SST directory: /var/lib/mysql//.sst from previous state transfer (20160119 18:41:30.835)

WSREP_SST: [INFO] Proceeding with SST (20160119 18:41:30.837)

WSREP_SST: [INFO] Evaluating socat -u TCP-LISTEN:4444,reuseaddr stdio |  xbcrypt --encrypt-algo=AES256 --encrypt-key=d8PtcnuenpRb1IGgPISDgmRrhLxwTKsE -d | xbstream -x; RC=( ${PIPESTATUS[@]} ) (20160119 18:41:30.839)

WSREP_SST: [INFO] Cleaning the existing datadir and innodb-data/log directories (20160119 18:41:30.840)

removed `/var/lib/mysql/aria_log_control'

removed `/var/lib/mysql/aria_log.00000001'

removed `/var/lib/mysql/mysql.sock'

removed `/var/lib/mysql/ib_logfile0'

removed `/var/lib/mysql/ibdata1'

removed `/var/lib/mysql/ib_logfile1'

WSREP_SST: [INFO] Waiting for SST streaming to complete! (20160119 18:41:30.860)

160119 18:41:32 [Note] WSREP: (299ea548, 'tcp://0.0.0.0:4567') turning message relay requesting off

xbcrypt:xb_crypt_read_chunk: wrong chunk magic at offset 0x0.

2016/01/19 18:41:41 socat[2688] E write(1, 0xfc7410, 8192): Broken pipe

WSREP_SST: [ERROR] Error while getting data from donor node:  exit codes: 1 0 0 (20160119 18:41:41.433)

WSREP_SST: [ERROR] Cleanup after exit with status:32 (20160119 18:41:41.434)

160119 18:41:41 [ERROR] WSREP: Process completed with error: wsrep_sst_xtrabackup-v2 --role 'joiner' --address '172.31.32.116' --datadir '/var/lib/mysql/' --defaults-file '/etc/my.cnf' --defaults-group-suffix '' --parent '2422'  '' : 32 (Broken pipe)

160119 18:41:41 [ERROR] WSREP: Failed to read uuid:seqno from joiner script.

160119 18:41:41 [ERROR] WSREP: SST failed: 32 (Broken pipe)

160119 18:41:41 [ERROR] Aborting

160119 18:28:50 [Note] WSREP: Running: 'wsrep_sst_xtrabackup-v2 --role 'donor' --address '172.31.32.116:4444/xtrabackup_sst//1' --socket '/var/lib/mysql/mysql.sock' --datadir '/var/lib/mysql/' --defaults-file '/etc/my.cnf' --defaults-group-suffix ''   '' --gtid 'fbeb045d-b94f-11e5-8504-4ae80b892690:5''

160119 18:28:50 [Note] WSREP: sst_donor_thread signaled with 0

WSREP_SST: [INFO] Streaming with xbstream (20160119 18:28:50.776)

WSREP_SST: [INFO] Using socat as streamer (20160119 18:28:50.778)

WSREP_SST: [INFO] Using /tmp/tmp.G7JKmrB9YZ as xtrabackup temporary directory (20160119 18:28:50.787)

WSREP_SST: [INFO] Using /tmp/tmp.T2xAk6fxFZ as innobackupex temporary directory (20160119 18:28:50.789)

WSREP_SST: [INFO] Xtrabackup based encryption enabled in my.cnf - Supported only from Xtrabackup 2.1.4 (20160119 18:28:50.791)

WSREP_SST: [INFO] Streaming GTID file before SST (20160119 18:28:50.792)

WSREP_SST: [INFO] Evaluating xbstream -c ${INFO_FILE} |  xbcrypt --encrypt-algo=AES256 --encrypt-key=92FABFA2213999936FD6B0EA04291157 | socat -u stdio TCP:172.31.32.116:4444 ; RC=( ${PIPESTATUS[@]} ) (20160119 18:28:50.794)

WSREP_SST: [INFO] Sleeping before data transfer for SST (20160119 18:28:50.805)

160119 18:28:52 [Note] WSREP: (5ef55a82, 'tcp://0.0.0.0:4567') turning message relay requesting off

WSREP_SST: [INFO] Streaming the backup to joiner at 172.31.32.116 4444 (20160119 18:29:00.807)

WSREP_SST: [INFO] Evaluating innobackupex --defaults-file=/etc/my.cnf  --defaults-group=mysqld --no-version-check  $tmpopts $INNOEXTRA --galera-info --stream=$sfmt $itmpdir 2>${DATA}/innobackup.backup.log | socat -u stdio TCP:172.31.32.116:4444; RC=( ${PIPESTATUS[@]} ) (20160119 18:29:00.809)

2016/01/19 18:29:01 socat[2317] E write(3, 0x1c61200, 8192): Broken pipe

WSREP_SST: [ERROR] innobackupex finished with error: 1.  Check /var/lib/mysql//innobackup.backup.log (20160119 18:29:01.461)

WSREP_SST: [ERROR] Cleanup after exit with status:22 (20160119 18:29:01.462)

WSREP_SST: [INFO] Cleaning up temporary directories (20160119 18:29:01.464)

160119 18:29:01 [ERROR] WSREP: Failed to read from: wsrep_sst_xtrabackup-v2 --role 'donor' --address '172.31.32.116:4444/xtrabackup_sst//1' --socket '/var/lib/mysql/mysql.sock' --datadir '/var/lib/mysql/' --defaults-file '/etc/my.cnf' --defaults-group-suffix ''   '' --gtid 'fbeb045d-b94f-11e5-8504-4ae80b892690:5'

160119 18:29:01 [ERROR] WSREP: Process completed with error: wsrep_sst_xtrabackup-v2 --role 'donor' --address '172.31.32.116:4444/xtrabackup_sst//1' --socket '/var/lib/mysql/mysql.sock' --datadir '/var/lib/mysql/' --defaults-file '/etc/my.cnf' --defaults-group-suffix ''   '' --gtid 'fbeb045d-b94f-11e5-8504-4ae80b892690:5': 22 (Invalid argument)

160119 18:29:01 [ERROR] WSREP: Command did not run: wsrep_sst_xtrabackup-v2 --role 'donor' --address '172.31.32.116:4444/xtrabackup_sst//1' --socket '/var/lib/mysql/mysql.sock' --datadir '/var/lib/mysql/' --defaults-file '/etc/my.cnf' --defaults-group-suffix ''   '' --gtid 'fbeb045d-b94f-11e5-8504-4ae80b892690:5'

160119 18:29:01 [Warning] WSREP: 0.0 (ip-172-31-32-117.us-west-2.compute.internal): State transfer to 1.0 (ip-172-31-32-116.us-west-2.compute.internal) failed: -22 (Invalid argument)

160119 18:41:40 innobackupex: Starting the backup operation

IMPORTANT: Please check that the backup run completes successfully.

           At the end of a successful backup run innobackupex

           prints "completed OK!".

160119 18:41:40 Connecting to MySQL server host: localhost, user: sst, password: not set, port: 0, socket: /var/lib/mysql/mysql.sock

Using server version 10.0.23-MariaDB-wsrep

innobackupex version 2.3.3 based on MySQL server 5.6.24 Linux (x86_64) (revision id: 525ca7d)

xtrabackup: uses posix_fadvise().

xtrabackup: cd to /var/lib/mysql/

xtrabackup: open files limit requested 0, set to 1024

xtrabackup: using the following InnoDB configuration:

xtrabackup:   innodb_data_home_dir = ./

xtrabackup:   innodb_data_file_path = ibdata1:12M:autoextend

xtrabackup:   innodb_log_group_home_dir = ./

xtrabackup:   innodb_log_files_in_group = 2

xtrabackup:   innodb_log_file_size = 50331648

160119 18:41:40 >> log scanned up to (1619735)

xtrabackup: Generating a list of tablespaces

160119 18:41:40 [01] Encrypting and streaming ./ibdata1

^Ginnobackupex: Error writing file 'UNOPENED' (Errcode: 32 - Broken pipe)

xb_stream_write_data() failed.

encrypt: write to the destination file failed.

^Ginnobackupex: Error writing file 'UNOPENED' (Errcode: 32 - Broken pipe)

[01] xtrabackup: Error: xtrabackup_copy_datafile() failed.

[01] xtrabackup: Error: failed to copy datafile.