[Gluster-devel] gluster SSL support

[Zbyszek Żółkiewski]

Hello!

I am trying to enable SSL support for gluster (i have read this post: http://nongnu.13855.n7.nabble.com/Glusterfs-SSL-capability-td168156.html too, and get through sources) but i am lost with the settings. I have enabled both options on the volume:

volume set gv0 client.ssl on
volume set gv0 server.ssl on

also i have put all the certs in /etc/ssl/ (i have generated my own CA + client certificates for both servers mx1 and mx2) - all seems correct but i still getting:

[2014-01-23 14:23:46.332041] E [socket.c:2258:socket_poller] 0-gv0-client-1: client setup failed
[2014-01-23 14:23:46.732281] E [socket.c:304:ssl_setup_connection] 0-gv0-client-0: SSL connect error
[2014-01-23 14:23:46.732319] E [socket.c:174:ssl_dump_error_stack] 0-gv0-client-0:   error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

i really tried all possible cert configurations and i think i am hitting wall here. Any tips?

Thanks!

__
Zbyszek Żółkiewski

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4891 bytes
Desc: not available
URL: <http://supercolony.gluster.org/pipermail/gluster-devel/attachments/20140123/41804b94/attachment-0001.p7s>