AnsibleRoles/ensure_mariadb
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix the TLS copy error and MariaDB not liking the CA Bundle

Browse Source
This commit is contained in:
Jason Rothstein 2021-10-31 18:37:59 -05:00
parent e7eac95453
commit 1daa22d767
2 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
templates/Fedora/34/etc/my.cnf.d/mariadb-server.cnf
View File

@ -19,7 +19,6 @@ socket=/var/lib/mysql/mysql.sock
log-error=/var/log/mariadb/mariadb.log log-error=/var/log/mariadb/mariadb.log
pid-file=/run/mariadb/mariadb.pid pid-file=/run/mariadb/mariadb.pid
character-set-server = utf8mb4 character-set-server = utf8mb4
ssl-ca=/etc/pki/tls/certs/ca-bundle.crt
ssl-cert=/etc/my.cnf.d/certificates/pubcert.epm ssl-cert=/etc/my.cnf.d/certificates/pubcert.epm
ssl-key=/etc/my.cnf.d/certificates/privkey.epm ssl-key=/etc/my.cnf.d/certificates/privkey.epm
tls-version=TLSv1.2,TLSv1.3 tls-version=TLSv1.2,TLSv1.3

2
templates/Fedora/34/usr/lib/systemd/system/mariadb-copytls.service
View File

@ -4,7 +4,7 @@ Description=Copy TLS Certificates for Mariadb
[Service] [Service]
Type=oneshot Type=oneshot
ExecStartPre=mkdir -p /etc/my.cnf.d/certificates ExecStartPre=mkdir -p /etc/my.cnf.d/certificates
ExecStart=cp /etc/httpd/md/domains/*/*.pem /etc/my.cnf.d/certificates/ ExecStart=/bin/bash -lc 'cp /etc/httpd/md/domains/*/*.pem /etc/my.cnf.d/certificates/'
ExecStartPost=chown -R mysql:mysql /etc/my.cnf.d/certificates ExecStartPost=chown -R mysql:mysql /etc/my.cnf.d/certificates
[Install] [Install]