13019 Commits

Author SHA1 Message Date
Esa Korhonen
44664132bc MXS-2792 Improve monitor script documentation
Apparently the previous script example was not working. Moved the
updated example to Monitor-Common.md.
2019-12-13 10:38:07 +02:00
Timofey Turenko
da682b7777 Fix trailing whitespace in install_build_deps.sh 2019-12-12 23:31:38 +02:00
Timofey Turenko
ba46cb4434 Enable 'PowerTools' yum repo if it is present
In CentOS8 some -devel packages are moved to PowerTools repository which
is disabled by default. install_build_depends now checks if this repo
is in the repolist then add enablerepo=PowerTools to the yum command
2019-12-11 17:35:32 +02:00
Timofey Turenko
2fc42fca1e Remove Docker installation from build script
Installation of Docker is removed from build script because it is done
in the not very reliable way and can fail and cause build failure.
E.g. this installation causes conflict with existing Docker.
2019-12-11 13:08:27 +02:00
Markus Mäkelä
7be6ee1616
MXS-2789: Make stale journal messages notifications
These events are of no actual consequence and can be safely ignored. It is
simply informational.
2019-12-10 11:11:05 +02:00
Markus Mäkelä
5ab6c472a0
Fix parameter name for kerberos_setup_ssl config 2019-12-10 09:48:58 +02:00
Johan Wikman
e673c3eab0 MXS-2788 Use case-insensitive string comparisons
When names are matched in rules and in resultsets, case insensitive
matching must be used.
2019-12-05 13:44:18 +02:00
Johan Wikman
694c0e784b MXS-2788 Add test that reveals problem
String comparison when checking whether a columns should be masked
is made in a case-insensitive way.
2019-12-05 13:02:05 +02:00
Johan Wikman
4f91d8aa77 Merge branch '2.3.15' into 2.3 2019-12-05 10:47:38 +02:00
Johan Wikman
578004677f Update 2.3.15 release date 2019-12-05 10:36:48 +02:00
Markus Mäkelä
fa656c6870
Disable peer verification in kerberos_setup_ssl
The test uses the command line client which doesn't provide certificates.
2019-12-05 10:21:25 +02:00
Johan Wikman
c5c6cc0363 Update 2.3 maintenance version 2019-12-05 10:11:15 +02:00
Markus Mäkelä
a7ca73a0de
Disable peer verification in kerberos_setup_ssl
The test uses the command line client which doesn't provide certificates.
2019-12-05 10:01:02 +02:00
Markus Mäkelä
acb8c70515
Skip timezone info for unit tests
The docker-based unit tests don't require timezones and not loading them
speeds things up greatly.
2019-12-04 13:27:24 +02:00
Johan Wikman
216ce9b4ee Add 2.3.15 release notes and update change log 2019-12-04 11:29:45 +02:00
Markus Mäkelä
9e9abbe8be
MXS-2786: Require certificates when verifying peers
When peer verification is enabled, clients must present a certificate.
2019-12-03 10:34:00 +02:00
Markus Mäkelä
255071efce
Add version to show servers output
This was missing in maxctrl but it was present in maxadmin.
2019-12-03 09:58:24 +02:00
Markus Mäkelä
1e57c2cb67
MXS-2643: Mention Galera in causal_reads documentation
causal_reads does not work with servers that update their state via
mechanisms other than the standard replication. In practice this is just
another Galera limitation.
2019-12-03 09:58:23 +02:00
Timofey Turenko
5ae2d02215 Merge branch '2.3' of github.com:mariadb-corporation/MaxScale into 2.3 2019-11-30 22:35:47 +02:00
Markus Mäkelä
cd9b82ba09
Print OpenSSL errors on CA cert errors
This helps figure out why the certificate is not OK.
2019-11-29 16:16:35 +02:00
Markus Mäkelä
fb23f3eb3e
OpenSSL 1.1 supports TLSv1.1 and TLSv1.2
TLSv1.0 is the only version that newer OpenSSL versions do not support.
2019-11-29 16:16:35 +02:00
Markus Mäkelä
b5ada0db7e
MXS-2762: Document ssl_version changes 2019-11-29 16:16:35 +02:00
Markus Mäkelä
374d5b28d1
MXS-2759: Optimize user loading query
The SQL for the second recursive CTE table can be optimized by adding a
where condition on the recursive part that rules out users that are not
roles. The functionality remains the same as only roles can be granted to
users.
2019-11-29 16:16:34 +02:00
Timofey Turenko
99d1ecd472 More reliable way to determine package manager type during the build
Checking presence of 'apt', 'yum' or 'zypper' command is not very
reliable way to determine package manager type.
E.g. OpenSUSE 25 has 'apt' which is wrapper over 'zypper' or rpm tools
can be installed on Ubuntu.
More relible way is to check /etc/*-release file and if it is not
availabe try to check presence of apt, yum or zypper
2019-11-28 16:10:57 +02:00
Johan Wikman
d41975dde8 MXS-2782 Return nullptr if non-existing worker is asked for
Earlier assert in debug mode and garbage in release mode.
2019-11-28 14:33:00 +02:00
Markus Mäkelä
5743f4eaa1
MXS-2777: Create drop-in systemd directory
The directory for user-configurable drop-in systemd files is now created
on installation.
2019-11-28 08:34:57 +02:00
Markus Mäkelä
774e9bc3f0
MXS-2762: Add ssl_version=TLSv13
Added new ssl_version value for TLSv1.3. This allows the list of accepted
protocol versions to be limited to all supported protocols. Previously
TLSv1.3 was only available with ssl_version=MAX.

Also fixed the enum value serialization to use a lowercase v. This causes
them to have the same value as the one used in the enum.
2019-11-28 07:48:01 +02:00
Markus Mäkelä
f7f865d4c3
MXS-2763: Log correct error for unsupported TLS versions
Previously when ssl_version was used with a value that is not supported on
the system, an unknown parameter error was returned. This could be
confusing and logging a proper error message should make it clear.
2019-11-28 07:48:01 +02:00
Esa Korhonen
53ee7072ee MXS-2775 Document semisync limitations with failover
The previous content was a bit too positive about semisync replication
ensuring a clean failover.
2019-11-22 12:52:36 +02:00
Andrey Vasilyev
cc52be8df2 Explicitly state the owner, group and access parameters to the MariaDB configuration file during the server reset 2019-11-20 09:20:13 +02:00
Esa Korhonen
ed3548b825 MXS-2770 Fix mxs2167_extra_port
1) Only two backends are set up for extra-port
2) The setting is checked to work by connecting directly to servers
3) The server connections are saturated before starting MaxScale
4) MaxScale logs are checked for extra-port-related messages
2019-11-18 13:31:29 +02:00
Johan Wikman
c6364acaec Revert "Build and test in parallel"
This reverts commit 9e931918e2441b619281fd5e96979f35c8b402f9.
2019-11-13 08:33:09 +02:00
Johan Wikman
d282d7c93f Merge branch '2.3.14' into 2.3 2019-11-12 09:19:27 +02:00
Johan Wikman
133a947bb5 Update 2.3.14 release date 2019-11-12 09:10:21 +02:00
Johan Wikman
5a8564628f Merge branch '2.3.14' into 2.3 2019-11-12 08:41:58 +02:00
Johan Wikman
d37b79d835 Update 2.3 maintenance number 2019-11-12 08:36:44 +02:00
Johan Wikman
27417b5328 Add 2.3.14 release notes and update change log 2019-11-11 09:11:51 +02:00
Markus Mäkelä
9e931918e2
Build and test in parallel
This speeds up builds when more CPUs are available. Also removed redundant
docker installation: mdbci already installs it.
2019-11-11 09:10:42 +02:00
Markus Mäkelä
638d1bf354
MXS-2760: Fix ssl_version conversion
The value is now correctly converted to the enum values.
2019-11-11 09:05:46 +02:00
Johan Wikman
71e1f81adc .gitignore: Add more stuff to ignore 2019-11-08 14:07:47 +02:00
Markus Mäkelä
5c4ac03c07
Log a message in readconnroute's handleError
This way there's trace that something unexpected happened and that the
session closed unexpectedly.
2019-11-08 13:44:21 +02:00
Johan Wikman
6cba7e8201 MXS-2732 Recognize character set names
In the tokenizer we will now recognize the character set names
of MariaDB and return a specific token for those. However, where
a character set name is not expected, it will automatically be
treated as an identifier.

Note that when the character set name is explicitly specified
for a literal string, the name must be prefixed with an underscore.
That is, if the character set name is "latin1", when used when
specifying a literal string, it's used as "_latin1 'a'".

Note that this does not fix the sqlite3 bug causing a leak, but
since the statement will now correctly be parsed, the leak will
not manifest itself.
2019-10-31 16:09:52 +02:00
Johan Wikman
177d95c3bc MXS-2732 Add test that reveals problem 2019-10-31 15:49:28 +02:00
Johan Wikman
50292c9f45 Merge branch '2.3.13' into 2.3 2019-10-31 10:06:02 +02:00
Johan Wikman
40a4ced21e Update 2.3.13 release date 2019-10-31 10:03:00 +02:00
Johan Wikman
88e0c3dc37 MXS-2732 Remove old sqlite-src-3110100 directory 2019-10-30 12:05:53 +02:00
Johan Wikman
4af67e95ff MXS-2732 Take newly installed sqlite3 into use
No code differences, but the used sqlite has now been installed
in one single commit.
2019-10-30 11:36:04 +02:00
Johan Wikman
c2a601bcf5 MXS-2732 Add MaxScale sqlite3 changes
This commit contains all MaxScale changes that have been made
to sqlite3 version 3110100.
2019-10-30 11:28:39 +02:00
Johan Wikman
d2db25073b MXS-2732 Update sqlite3 tool mkopcodeh.tcl from 3200000
The mkopcodeh.tcl of sqlite3 version 3110100 has a bug that
manifests itself so that it generates broken code depending on
what keywords there are and in what order. The mkopcodeh.tcl
from 3200000 does not have that problem.
2019-10-30 11:22:31 +02:00
Johan Wikman
6df8fb2497 MXS-2732 Add sqlite3 version 3110100 2019-10-30 10:58:24 +02:00