7.12.12. Connector SSL Advertisement Configuration
When SSL is enabled, the Connector automatically advertises the ports and
itself as SSL capable. With some clients, this triggers them to use SSL even
if SSL has not been configured. This causes the connections to fail and not
operate correctly.
You can safely disable SSL advertisement in the Connector by setting the
tpm option
connector-ssl-capable to
false:
Click the link below to switch examples between Staging and INI methods...
Show Staging
Show INI
copyshell> tpm query staging
tungsten@db1:/opt/continuent/software/tungsten-clustering-6.1.25-6
shell> echo The staging USER is `tpm query staging| cut -d: -f1 | cut -d@ -f1`
The staging USER is tungsten
shell> echo The staging HOST is `tpm query staging| cut -d: -f1 | cut -d@ -f2`
The staging HOST is db1
shell> echo The staging DIRECTORY is `tpm query staging| cut -d: -f2`
The staging DIRECTORY is /opt/continuent/software/tungsten-clustering-6.1.25-6
shell> ssh {STAGING_USER}@{STAGING_HOST}
shell> cd {STAGING_DIRECTORY}
copyshell> ./tools/tpm configure alpha \
--connector-ssl-capable=false
Run the tpm command to update the software with the Staging-based configuration:
copyshell> ./tools/tpm update
For information about making updates when using a Staging-method deployment, please see Section 10.3.7, “Configuration Changes from a Staging Directory”.
copyshell> vi /etc/tungsten/tungsten.ini
copy[alpha]
...
connector-ssl-capable=false
Run the tpm command to update the software with the INI-based configuration:
copyshell> tpm query staging
tungsten@db1:/opt/continuent/software/tungsten-clustering-6.1.25-6
shell> echo The staging DIRECTORY is `tpm query staging| cut -d: -f2`
The staging DIRECTORY is /opt/continuent/software/tungsten-clustering-6.1.25-6
shell> cd {STAGING_DIRECTORY}
shell> ./tools/tpm update
For information about making updates when using an INI file, please see Section 10.4.4, “Configuration Changes with an INI file”.
Configuration group alpha
The description of each of the options is shown below; click the icon to hide this detail:
Click the icon to show a detailed description of each argument.
--connector-ssl-capable=false
connector-ssl-capable=false
When SSL is enabled, the Connector automatically advertises the
ports and itself as SSL capable. With some clients, this
triggers them to use SSL even if SSL has not been configured.
This causes the connections to fail and not operate correctly.
Warning
Updating these values require a connector restart (via tpm
update) for the changes to be recognized.