When using SAN certificates, the marabackup dump fails with:
E certificate is valid but its commonName does not match hostname
|
But on SAN certificates, the cn filed must be ignored and the SAN section of the cert must checked.
So
[sst]
|
encrypt=3
|
sst-syslog=1
|
tcert=PATH
|
tkey=PATH
|
Will work, but without verification.
But
[sst]
|
encrypt=3
|
sst-syslog=1
|
tcert=PATH
|
tkey=PATH
|
tca=PATH
|
fails.
So the only chance is to disable verification. 