MariaDB Replica error. SSL certificate validation failure
-1
votes
1
answer
57
views
MariaDB Replica error. SSL certificate validation failure
Master and SLave on Windows. Both on MariaDB 10.11.11. All certificates are created on OpenSSL
On Slave:
Slave_IO_State: Connecting to master
Master_Host: 192.168.0.20
Master_User: replicator
Master_Port: 3306
Connect_Retry: 10
Master_Log_File: mysql-bin.000042
Read_Master_Log_Pos: 40394082
Relay_Log_File: mysql-relay-bin.000001
Relay_Log_Pos: 4
Relay_Master_Log_File: mysql-bin.000042
Slave_IO_Running: Connecting
Slave_SQL_Running: Yes
Replicate_Do_DB:
Replicate_Ignore_DB:
Replicate_Do_Table:
Replicate_Ignore_Table:
Replicate_Wild_Do_Table:
Replicate_Wild_Ignore_Table:
Last_Errno: 0
Last_Error:
Skip_Counter: 0
Exec_Master_Log_Pos: 40394082
Relay_Log_Space: 3584
Until_Condition: None
Until_Log_File:
Until_Log_Pos: 0
Master_SSL_Allowed: Yes
Master_SSL_CA_File: C:/mariaDB/cert/ca-cert.pem
Master_SSL_CA_Path:
Master_SSL_Cert: C:/mariaDB/cert/client-cert.pem
Master_SSL_Cipher:
Master_SSL_Key: C:/mariaDB/cert/client-key.pem
Seconds_Behind_Master: NULL
Master_SSL_Verify_Server_Cert: Yes
Last_IO_Errno: 2026
Last_IO_Error: error connecting to master 'replicator@192.168.0.20:3306' -
retry-time: 10
maximum-retries: 100000
message: SSL connection error: SSL certificate validation failure
Last_SQL_Errno: 0
Last_SQL_Error:
Replicate_Ignore_Server_Ids:
Master_Server_Id: 0
Master_SSL_Crl:
Master_SSL_Crlpath:
Using_Gtid: No
Gtid_IO_Pos:
Replicate_Do_Domain_Ids:
Replicate_Ignore_Domain_Ids:
Parallel_Mode: optimistic
SQL_Delay: 0
SQL_Remaining_Delay: NULL
Slave_SQL_Running_State: Slave has read all relay log; waiting for more updates
Slave_DDL_Groups: 0
Slave_Non_Transactional_Groups: 0
Slave_Transactional_Groups: 0
Replicate_Rewrite_DB:
| Variable_name | Value |
| have_openssl | NO |
| have_ssl | YES |
| ssl_ca | C:/mariaDB/cert/ca-cert.pem |
| ssl_capath | |
| ssl_cert | C:/mariaDB/cert/server-cert.pem |
| ssl_cipher | |
| ssl_crl | |
| ssl_crlpath | |
| ssl_key | C:/mariaDB/cert/server-key.pem |
| version_ssl_library | WolfSSL 5.7.6 |
`mysql Ver 15.1 Distrib 10.11.11-MariaDB, for Win64 (AMD64), source revision e69f8cae1a15e15b9e4f5e0f8497e1f17bdc81a4
Connection id: 8
Current database:
Current user: root@localhost
SSL: Cipher in use is ECDHE-RSA-AES256-GCM-SHA384
Current pager: stdout
Using outfile: ''
Using delimiter: ;
Server:
MariaDB Server version: 10.11.11-MariaDB-log mariadb.org binary distribution
Protocol version: 10
Connection: localhost via TCP/IP Server
characterset: utf8mb4 Db
characterset: utf8mb4 Client
characterset: utf8mb3 Conn.
characterset: utf8mb3
TCP port: 3306
Log mariadb on Slave:
[Note] Slave I/O thread: Start asynchronous replication to master 'replicator@192.168.0.20:3306' in log 'mysql-bin.000042' at position 40394082 2025-02-26 10:14:56 9
[Note] Slave SQL thread initialized, starting replication in log 'mysql-bin.000042' at position 40394082, relay log 'C:\mariadb\log\mysql-relay-bin.000001' position: 4
[ERROR] Slave I/O: error connecting to master 'replicator@192.168.0.20:3306' - retry-time: 10 maximum-retries: 100000 message: SSL connection error: SSL certificate validation failure, Internal MariaDB error code: 2026
Log mariadb on Master:
[Warning] Aborted connection 93919 to db: 'unconnected' user: 'unauthenticated' host: 'slave.themdall.local' (Got an error reading communication packets)
[Warning] Aborted connection 93919 to db: 'unconnected' user: 'unauthenticated' host: 'slave.themdall.local' (This connection closed normally without authentication)
I can connect to TestDB from mysql slave on this command:
mysql --ssl-ca=C:/mariaDB/cert/ca-cert.pem --ssl-cert=C:/mariaDB/cert/client-cert.pem --ssl-key=C:/mariaDB/cert/client-key.pem -h 192.168.0.20 -p -u replicator -D TestDB
Asked by Themdall
(1 rep)
Feb 26, 2025, 12:31 PM
Last activity: Feb 28, 2025, 12:38 PM
Last activity: Feb 28, 2025, 12:38 PM