{question}
How to disable SSL in a SingleStore cluster?
{question}
{answer}
To disable SSL Secure Connections. Follow the mentioned steps below,
1. Toolbox commands are being used to disable SSL,
Execute the below commands from the MA toolbox to disable SSL, --all is being used to reset the SSL to default on all the nodes.
sdb-admin update-config -y --all --key ssl_ca --reset
sdb-admin update-config -y --all --key ssl_key --reset
sdb-admin update-config -y --all --key ssl_cert --reset
sdb-admin restart-node -a -y
2. For Validation: Login into MA and check whether SSL is disabled, It should show as below. Check separately on CA and leaves as well to make sure it's disabled on each and every node.
memsql> show variables like '%ssl%';
+-------------------------------+------------+
| Variable_name | Value |
+-------------------------------+------------+
| have_openssl | OFF |
| have_ssl | OFF |
| node_replication_ssl_only | OFF |
| processlist_rpc_json_max_size | 2048 |
| ssl_ca | |
| ssl_capath | |
| ssl_cert | |
| ssl_cipher | |
| ssl_key | |
| ssl_key_passphrase | [redacted] |
+-------------------------------+------------+
3. If users were configured to use SSL, ALTER USER as below:
ALTER USER 'user_name' REQUIRE NONE;
4. In S2MS we don't disable SSL. For S2MS, you need to open a support ticket if you need to disable SSL.
Links related to SSL
SSL Secure connections
Troubleshooting SSL
SSL and TLS Deployment Best Practices
{answer}