Files
aa05a3fa93863be81ddf0b6c0f3631bf0f6a6d69
openstack-ansible-os_nova /defaults
Dmitriy Rabotyagov aa05a3fa93 Refactor galera_use_ssl behaviour
With PKI role in place in most cases you don't need to explicitly
provide path to the CA file because PKI role ensures that CA is trusted
by the system overall. In the meanwhile in PyMySQL [1] you must either
provide CA file or cert/key or enable verify.
Since current behaviour is to provide path to the custom CA we expect
certificate being trusted overall. Thus we enable cert verification when
galera_use_ssl is True.
[1] 78f0cf99e5/pymysql/connections.py (L267)
Change-Id: I99509b519c91d8fefc91745bb982866fe3fbc8e7
2021年09月20日 18:02:48 +03:00
..
2021年09月20日 18:02:48 +03:00