hcq/MaxScale
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

MXS-2033: Require only MASTER_SSL_CA

Browse Source 
MASTER_SSL_CERT and MASTER_SSL_KEY are optional and should not be
required.
This commit is contained in:
Markus Mäkelä
2018-08-29 18:33:04 +03:00
parent 5f4aa46552
commit 4c5e18b4f0
1 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
server/modules/routing/binlogrouter/blr_slave.c
View File

@ -4377,9 +4377,8 @@ int blr_handle_change_master(ROUTER_INSTANCE* router,
ssl_error = blr_set_master_ssl(router, change_master, error);
if (ssl_error != -1 &&
(!change_master.ssl_cert ||
!change_master.ssl_ca ||
!change_master.ssl_key))
// No CA cert is defined or only one of CERT or KEY is defined
(!change_master.ssl_ca || (bool)change_master.ssl_cert != (bool)change_master.ssl_key))
{
if (change_master.ssl_enabled &&
atoi(change_master.ssl_enabled))
@ -4387,7 +4386,7 @@ int blr_handle_change_master(ROUTER_INSTANCE* router,
snprintf(error,
BINLOG_ERROR_MSG_LEN,
"MASTER_SSL=1 but some required options are missing: "
"check MASTER_SSL_CERT, MASTER_SSL_KEY, MASTER_SSL_CA");
"check that at least MASTER_SSL_CA is defined");
ssl_error = -1;
}
}