Commit 2c9ab315 authored by Andre F de Miranda's avatar Andre F de Miranda Committed by Julius Goryavsky

MDEV-34214: allow intermediate certs in wsrep

* Modify scripts/wsrep_sst_common.sh to allow handling of intermediate CA certificates present in ssl_cert file.
Signed-off-by: default avatarJulius Goryavsky <julius.goryavsky@mariadb.com>
parent 937f4570
...@@ -1333,6 +1333,7 @@ verify_ca_matches_cert() ...@@ -1333,6 +1333,7 @@ verify_ca_matches_cert()
errmsg=$("$OPENSSL_BINARY" verify -verbose \ errmsg=$("$OPENSSL_BINARY" verify -verbose \
${ca:+ -CAfile} ${ca:+ "$ca"} \ ${ca:+ -CAfile} ${ca:+ "$ca"} \
${cap:+ -CApath} ${cap:+ "$cap"} \ ${cap:+ -CApath} ${cap:+ "$cap"} \
-untrusted "$cert" \
"$cert" 2>&1) || not_match=1 "$cert" 2>&1) || not_match=1
if [ $not_match -eq 1 ]; then if [ $not_match -eq 1 ]; then
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment