Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Fixed
-
1.4.1
-
None
Description
Put ssl configuration to router section instead of listener, for example (use ssl=required):
[RW Split Router]
|
type=service
|
router= readwritesplit
|
servers=server1,server2,server3,server4
|
user=skysql
|
passwd=skysql
|
max_slave_connections=100%
|
router_options=slave_selection_criteria=LEAST_CURRENT_OPERATIONS
|
#filters=QLA
|
ssl=required
|
ssl_cert=//home/vagrant//certs/server-cert.pem
|
ssl_key=//home/vagrant//certs/server-key.pem
|
ssl_ca_cert=//home/vagrant//certs/ca.pem
|
ssl_version=TLSv12
|
- try to start Maxscale
- try to connect to the defined router
Expected result:
- user notified about problem with ssl, connection can not be created without ssl
Actual result:
- Maxscale is stared succesfully
- connection to the router can be created without ssl
- user is unaware regarding unsecured connection
- there are error messaged in the log (like "error : Unexpected parameter 'ssl_version' for object 'RW Split Router' of type 'service'.")