Re: Mariadb in Galera Cluster wont start on 2nd node in 2 node cluster

[Lammert Bies]

Hi Diana,

This error is not primarily caused by MariaDB/Galera, but caused by a communication error between the nodes due to failing encryption.  The error "error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed" is generated if the SSL certificate used for encryption is not found, or invalid. 

You may want to check if the SSL cerficiates are located in the directory where the system searches for them, and if they are not expired. The [sst] section in server.cnf should contain the paths where the system is looking for the certificates.

[Aaron Morand]

Also, make sure that your SSL certificate files were not corrupted as a result of the power outage.

--
You received this message because you are subscribed to the Google Groups "codership" group.
To unsubscribe from this group and stop receiving emails from it, send an email to codership-team+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Diana Walston]

On Friday, March 10, 2017 at 1:27:45 AM UTC-5, Diana Walston wrote:

Hello, I am new to Mariadb/Galera cluster, and we had a power failure and now I cant get mariadb to start on my second node,  I receive the following messages:

170309 15:44:55 [ERROR] WSREP: gcs connect failed: Connection timed out
170309 15:44:55 [ERROR] WSREP: wsrep::connect() failed: 7
170309 15:44:55 [ERROR] Aborting

170309 15:44:55 [Note] WSREP: waiting for client connections to close: 0
170309 15:44:55 [Note] WSREP: Service disconnected.
170309 15:44:56 [Note] WSREP: Some threads may fail to exit.
170309 15:44:56 [Note] /usr/libexec/mysqld: Shutdown complete

170309 15:44:56 mysqld_safe mysqld from pid file /var/run/mariadb/mariadb.pid ended
[root@tdaf-fi10osp02 mariadb]# tail -20 mariadb.log
170309 15:44:49 [ERROR] WSREP: handshake with remote endpoint ssl://x.x.x.x:4567  failed: 1: 'SSL error.' ( 336134278: 'error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed')
170309 15:44:50 [ERROR] WSREP: handshake with remote endpoint ssl://x.x.x.x:4567 failed: 1: 'SSL error.' ( 336134278: 'error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed')
170309 15:44:52 [ERROR] WSREP: handshake with remote endpoint ssl://x.x.x.x:4567 failed: 1: 'SSL error.' ( 336134278: 'error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed')
170309 15:44:53 [ERROR] WSREP: handshake with remote endpoint ssl://x.x.x.x:4567 failed: 1: 'SSL error.' ( 336134278: 'error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed')
170309 15:44:55 [ERROR] WSREP: handshake with remote endpoint ssl://x.x.x.x:4567 failed: 1: 'SSL error.' ( 336134278: 'error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed')
170309 15:44:55 [Note] WSREP: view((empty))
170309 15:44:55 [ERROR] WSREP: failed to open gcomm backend connection: 110: failed to reach primary view: 110 (Connection timed out)
         at gcomm/src/pc.cpp:connect():141
170309 15:44:55 [ERROR] WSREP: gcs/src/gcs_core.c:gcs_core_open():202: Failed to open backend connection: -110 (Connection timed out)
170309 15:44:55 [ERROR] WSREP: gcs connect failed: Connection timed out
170309 15:44:55 [ERROR] WSREP: wsrep::connect() failed: 7
170309 15:44:55 [ERROR] Aborting

170309 15:44:55 [Note] WSREP: waiting for client connections to close: 0
170309 15:44:55 [Note] WSREP: Service disconnected.
170309 15:44:56 [Note] WSREP: Some threads may fail to exit.
170309 15:44:56 [Note] /usr/libexec/mysqld: Shutdown complete

Any direction you can provide would be greatly appreciated.