Done
Details
Details
Assignee
oleksiy.lukin
oleksiy.lukinReporter
Satya Bodapati
Satya BodapatiPlanned Version/s
Needs QA
Yes
Sprint
None
Priority
Created September 23, 2024 at 2:31 PM
Updated February 26, 2025 at 3:27 PM
Resolved February 26, 2025 at 3:27 PM
Some configuration issues or certificate issues (say certificate expired) can cause libkmip component to throw cryptic (or very simple messages) that it failed.
I think there are two issues here.
component loaded successfully despite errors. Later server reports error when it loads keys or store keys. Sometimes InnoDB crashes because IO on redo and undo cannot fail.
messages like
Loading the client certificate failed");
,Loading the client key failed");
,Loading the CA certificate failed");
,("BIO_do_connect failed");
. These are not helpful to user.We should also print the config used in the error message.
see extra/libkimp/kmippp/kmippp.cpp
Proposed patch (that can be improved):
We should be able to capture error message to string buffer and use it along with std::runtime_error.
ideas from
or a simpler version: