[MXS-788] Enable SSL for master registration in binlog server. Created: 2016-07-05  Updated: 2016-08-17  Resolved: 2016-07-18

Status: Closed
Project: MariaDB MaxScale
Component/s: binlogrouter
Affects Version/s: None
Fix Version/s: 2.1.0

Type: Task Priority: Major
Reporter: Johan Wikman Assignee: Massimiliano Pinto (Inactive)
Resolution: Fixed Votes: 0
Labels: None

Sprint: 2016-13

 Comments   
Comment by Massimiliano Pinto (Inactive) [ 2016-07-08 ]

Added some options to master.ini.

Modified code in blr.c in order to insert into backend server struct SSL options.

First tests ok.

Need to extend CHANGE MASTER TO syntax and report cofig options via SHOW SLAVE STATUS

Comment by Massimiliano Pinto (Inactive) [ 2016-07-08 ]

Added:

Master_SSL_Allowed: Yes
Master_SSL_CA_File: /home/maxscale/packages/certificates/client/ca.pem
Master_SSL_CA_Path:
Master_SSL_Cert: /home/maxscale/packages/certificates/client/client-cert.pem
Master_SSL_Cipher:
Master_SSL_Key: /home/maxscale/packages/certificates/client/client-key.pem

Comment by Massimiliano Pinto (Inactive) [ 2016-07-12 ]

Working on CHANGE MASTER TO:

MySQL> change master to master_ssl_cert='/home/maxscale/packages/certificates/client/client-cert.pem', master_ssl_ca='/home/maxscale/packages/certificates/client/ca.pem', master_ssl=1, master_ssl_key='/home/maxscale/packages/certificates/client/client-key.pem';

master.ini:

[binlog_configuration]
master_host=a.b.c.d
master_port=3306
master_user=repl
master_password=slavepass
filestem=mysql-bin-massi
master_ssl=1
master_ssl_key=/home/maxscale/packages/certificates/client/client-key.pem
master_ssl_cert=/home/maxscale/packages/certificates/client/client-cert.pem
master_ssl_ca=/home/maxscale/packages/certificates/client/ca.pem

Now working on constraints for CHANGE MASTER TO MASTER_SSL*

Comment by Massimiliano Pinto (Inactive) [ 2016-07-14 ]

Added SSL details to "show services" via MaxAdmin

Master SSL is ON:
Master SSL CA cert: /home/mpinto/packages/certificates/client/ca.pem
Master SSL Cert: /home/mpinto/packages/certificates/client/client-cert.pem
Master SSL Key: /home/mpinto/packages/certificates/client/client-key.pem
Master SSL tls_ver: MAX

And when a slave is connected with SSL a new filed will be displayed:

Slave connected with SSL: Established

Code review done.

Tests are running.

Generated at Thu Feb 08 04:01:56 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.