Sample Header Ad - 728x90

MariaDB Replica error. SSL certificate validation failure

-1 votes
1 answer
57 views
MariaDB Replica error. SSL certificate validation failure Master and SLave on Windows. Both on MariaDB 10.11.11. All certificates are created on OpenSSL On Slave:
Slave_IO_State: Connecting to master                    
    Master_Host: 192.168.0.20                   
    Master_User: replicator                  
    Master_Port: 3306                 
    Connect_Retry: 10                
    Master_Log_File: mysql-bin.000042            
    Read_Master_Log_Pos: 40394082                 
    Relay_Log_File: mysql-relay-bin.000001                  
    Relay_Log_Pos: 4          
    Relay_Master_Log_File: mysql-bin.000042               
    Slave_IO_Running: Connecting              
    Slave_SQL_Running: Yes                
    Replicate_Do_DB:            
    Replicate_Ignore_DB:             
    Replicate_Do_Table:         
    Replicate_Ignore_Table:        
    Replicate_Wild_Do_Table:    
    Replicate_Wild_Ignore_Table:                     
    Last_Errno: 0                     
    Last_Error:                   
    Skip_Counter: 0            
    Exec_Master_Log_Pos: 40394082                
    Relay_Log_Space: 3584                
    Until_Condition: None                 
    Until_Log_File:                  
    Until_Log_Pos: 0             
    Master_SSL_Allowed: Yes            
    Master_SSL_CA_File: C:/mariaDB/cert/ca-cert.pem             
    Master_SSL_CA_Path: 
    Master_SSL_Cert: C:/mariaDB/cert/client-cert.pem              
    Master_SSL_Cipher:                 
    Master_SSL_Key: C:/mariaDB/cert/client-key.pem          
    Seconds_Behind_Master: NULL  
    Master_SSL_Verify_Server_Cert: Yes                  
    
Last_IO_Errno: 2026                  
Last_IO_Error: error connecting to master 'replicator@192.168.0.20:3306' - 
               retry-time: 10  
               maximum-retries: 100000  
               message: SSL connection error: SSL certificate validation failure                 
Last_SQL_Errno: 0                 
Last_SQL_Error:    
Replicate_Ignore_Server_Ids:               
Master_Server_Id: 0                 
Master_SSL_Crl:             
Master_SSL_Crlpath:                     
Using_Gtid: No                    
Gtid_IO_Pos:        
Replicate_Do_Domain_Ids:    
Replicate_Ignore_Domain_Ids:                  
Parallel_Mode: optimistic                      
SQL_Delay: 0            
SQL_Remaining_Delay: NULL        
Slave_SQL_Running_State: Slave has read all relay log; waiting for more updates               
Slave_DDL_Groups: 0 
Slave_Non_Transactional_Groups: 0     
Slave_Transactional_Groups: 0           
Replicate_Rewrite_DB:

    | Variable_name       | Value                                      |
    | have_openssl        | NO                                         |
    | have_ssl            | YES                                        | 
    | ssl_ca              | C:/mariaDB/cert/ca-cert.pem                |
    | ssl_capath          |                                            | 
    | ssl_cert            | C:/mariaDB/cert/server-cert.pem            | 
    | ssl_cipher          |                                            | 
    | ssl_crl             |                                            |
    | ssl_crlpath         |                                            |
    | ssl_key             | C:/mariaDB/cert/server-key.pem             | 
    | version_ssl_library | WolfSSL 5.7.6                              |

`mysql  Ver 15.1 Distrib 10.11.11-MariaDB, for Win64 (AMD64), source revision e69f8cae1a15e15b9e4f5e0f8497e1f17bdc81a4

Connection id:          8
Current database:
Current user:           root@localhost
SSL:                    Cipher in use is ECDHE-RSA-AES256-GCM-SHA384
Current pager:          stdout 
Using outfile:          '' 
Using delimiter:        ; 
Server:                 
MariaDB Server version:         10.11.11-MariaDB-log mariadb.org binary distribution 
Protocol version:       10 
Connection:             localhost via TCP/IP Server 
characterset:    utf8mb4 Db     
characterset:    utf8mb4 Client 
characterset:    utf8mb3 Conn.  
characterset:    utf8mb3 
TCP port:               3306
Log mariadb on Slave:
[Note] Slave I/O thread: Start asynchronous replication to master 'replicator@192.168.0.20:3306' in log 'mysql-bin.000042' at position 40394082 2025-02-26 10:14:56 9 
[Note] Slave SQL thread initialized, starting replication in log 'mysql-bin.000042' at position 40394082, relay log 'C:\mariadb\log\mysql-relay-bin.000001' position: 4 
[ERROR] Slave I/O: error connecting to master 'replicator@192.168.0.20:3306' - retry-time: 10  maximum-retries: 100000  message: SSL connection error: SSL certificate validation failure, Internal MariaDB error code: 2026
Log mariadb on Master:
[Warning] Aborted connection 93919 to db: 'unconnected' user: 'unauthenticated' host: 'slave.themdall.local' (Got an error reading communication packets) 
[Warning] Aborted connection 93919 to db: 'unconnected' user: 'unauthenticated' host: 'slave.themdall.local' (This connection closed normally without authentication)
I can connect to TestDB from mysql slave on this command:
mysql --ssl-ca=C:/mariaDB/cert/ca-cert.pem --ssl-cert=C:/mariaDB/cert/client-cert.pem --ssl-key=C:/mariaDB/cert/client-key.pem -h 192.168.0.20 -p -u replicator -D TestDB
Asked by Themdall (1 rep)
Feb 26, 2025, 12:31 PM
Last activity: Feb 28, 2025, 12:38 PM