1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
include/master-slave.inc
Warnings:
Note #### Sending passwords in plain text without SSL/TLS is extremely insecure.
Note #### Storing MySQL user name or password information in the connection metadata repository is not secure and is therefore not recommended. Please consider using the USER and PASSWORD connection options for START REPLICA; see the 'START REPLICA Syntax' in the MySQL Manual for more information.
[connection master]
CALL mtr.add_suppression("Failed to set up SSL because of the following *");
CALL mtr.add_suppression("Replica SQL for channel '': Request to stop replica SQL Thread received while *");
[on master]
SET PERSIST_ONLY ssl_fips_mode=ON;
Warnings:
Warning 1287 '@@ssl_fips_mode' is deprecated and will be removed in a future release.
[on slave]
SET PERSIST_ONLY ssl_fips_mode=ON;
Warnings:
Warning 1287 '@@ssl_fips_mode' is deprecated and will be removed in a future release.
include/stop_slave.inc
include/rpl_restart_server.inc [server_number=1]
include/start_slave.inc
[connection master]
include/save_binlog_position.inc
[on master]
[on slave]
include/stop_slave.inc
include/rpl_restart_server.inc [server_number=2]
# R1: Set the ssl connection OFF
CHANGE REPLICATION SOURCE TO SOURCE_USER = 'root', SOURCE_PASSWORD = '', SOURCE_SSL = 0;;
Warnings:
Note 1759 Sending passwords in plain text without SSL/TLS is extremely insecure.
Note 1760 Storing MySQL user name or password information in the connection metadata repository is not secure and is therefore not recommended. Please consider using the USER and PASSWORD connection options for START REPLICA; see the 'START REPLICA Syntax' in the MySQL Manual for more information.
include/start_slave.inc
include/check_slave_no_error.inc
[on slave]
include/stop_slave.inc
# R2: Set the ssl connection ON and weak cipher CAMELLIA256-SHA
CHANGE REPLICATION SOURCE TO SOURCE_USER = 'root', SOURCE_PASSWORD = '', SOURCE_SSL = 1, SOURCE_TLS_VERSION = 'TLSv1.2', SOURCE_SSL_CIPHER = 'CAMELLIA256-SHA', SOURCE_RETRY_COUNT = 1;
Warnings:
Note 1759 Sending passwords in plain text without SSL/TLS is extremely insecure.
Note 1760 Storing MySQL user name or password information in the connection metadata repository is not secure and is therefore not recommended. Please consider using the USER and PASSWORD connection options for START REPLICA; see the 'START REPLICA Syntax' in the MySQL Manual for more information.
START SLAVE;
Warnings:
Warning 1287 'START SLAVE' is deprecated and will be removed in a future release. Please use START REPLICA instead
include/wait_for_slave_io_error.inc [errno=2026]
select SERVICE_STATE, LAST_ERROR_NUMBER from performance_schema.replication_connection_status;
SERVICE_STATE LAST_ERROR_NUMBER
OFF 2026
# R3: Set the ssl connection ON and strong cipher
include/stop_slave.inc
CHANGE REPLICATION SOURCE TO SOURCE_USER = 'root', SOURCE_PASSWORD = '', SOURCE_SSL = 1, SOURCE_TLS_VERSION = 'TLSv1.2', SOURCE_SSL_CIPHER = 'ECDHE-RSA-AES128-GCM-SHA256';
Warnings:
Note 1759 Sending passwords in plain text without SSL/TLS is extremely insecure.
Note 1760 Storing MySQL user name or password information in the connection metadata repository is not secure and is therefore not recommended. Please consider using the USER and PASSWORD connection options for START REPLICA; see the 'START REPLICA Syntax' in the MySQL Manual for more information.
include/start_slave.inc
include/check_slave_no_error.inc
include/stop_slave.inc
==== Cleanup (Note that slave IO thread is not running) ====
CHANGE REPLICATION SOURCE TO SOURCE_USER = 'root', SOURCE_PASSWORD = '', SOURCE_SSL=0;
Warnings:
Note #### Sending passwords in plain text without SSL/TLS is extremely insecure.
Note #### Storing MySQL user name or password information in the connection metadata repository is not secure and is therefore not recommended. Please consider using the USER and PASSWORD connection options for START REPLICA; see the 'START REPLICA Syntax' in the MySQL Manual for more information.
include/rpl_reset.inc
[on master]
RESET PERSIST ssl_fips_mode;
[on slave]
RESET PERSIST ssl_fips_mode;
[on master]
include/rpl_end.inc
|
