Howto on The Infinite Unknown

Fixing MySQL SSL Replication Errors

Jared Watkins — Tue, 07 May 2013 00:00:00 +0000

I spent 2 nights trying to get mysql replication over ssl to work.. and kept hitting this generic error message: connection error 2026. After much searching and trying different things I finally found the solution that worked for me. If you are hitting this error here’s a short list of things to check.

Searching around I found a few key things to look for when you see this error. First.. make sure your certificate CNs are unique. Some people mistakenly used the same strings when generating server and client certificates. When generating your CSR and going through all the cert detail questions your CN would normally be the fully qualified domain name of the host you are generating the cert for.

openssl x509 -in <cert file> -noout -noout -subject

Then I would check that you can connect manually from your replication slave to the master.

mysql -h <master server> --ssl -u <replication user on master>

After you connect make sure your sesson is using ssl by issuing the command “\s”. It should list something like this: SSL: Cipher in use is DHE-RSA-AES256-SHA

In my case the manual connection was working fine.. but not the replication.

The problem I had was actually with paths used in the ‘CHANGE MASTER TO’ line on the slave. When setting values for MASTER_SSL_CA, MASTER_SSL_CERT, and MASTER_SSL_KEY you should specificy the complete path to the files. The docs suggest otherwise.. in combination with MASTER_SSL_CAPATH. I found that particular setting wasn’t used the way I expected.. so I left it out and went with full path names.

Hope that’s helpful for someone else!

Keep FreeNAS From Crashing Tweaks

Jared Watkins — Sun, 01 Jul 2012 00:00:00 +0000

I found these settings on another site.. reposting here for my future reference and to double the possibility of someone else not having to spend hours trying to figure this out. My install of FreeNAS kept hanging under even moderate write loads… rendering it unusable until I applied these memory tweaks. I don’t know nearly as much about BSD internals as I do linux. You can apply these through the web GUI under System->Tunables. When you do they get added to the file /boot/loader.conf.local but should also be backed up with the rest of your config.

Of course this assumes you have adequate memory… I used these values on a system with 6G total ram.

vm.kmem_size="1536M"
vm.kmem_size_max="2048M"
vfs.zfs.arc_min="256M"
vfs.zfs.arc_max="1024M"
vfs.zfs.txg.timeout="30"
vfs.zfs.vdev.max_pending="35"
vfs.zfs.vdev.min_pending="4"
vfs.zfs.txg.write_limit_override="1073741824"

OSX Mail App Using Tons of Memory and CPU?

Jared Watkins — Sat, 07 Jan 2012 00:00:00 +0000

I’ve been using a mac for a while now and I recently decided to dump Entourage and go to using the native Mail.app. I noticed a problem though.. within minutes of starting up it would consume several hundred megs of ram and have frequent CPU spikes of 80 to 100%. If Mail was left open, memory usage would climb above 2 gig with continued CPU spikes. After much digging I finally found the problem and fixed it.

I’d been using iSync back before I got an iPhone.. and had never thought to disable it. It looks like what was happening is that mail and other apps (ical, address book) had been building a huge database of stuff that needed to be synced to my old phone. Once I went in and reset the sync history and disabled iSync.. everything calmed down and now a running instance of Mail.app with 3 imap accounts and an Exchange account is using about 60 MB of ram.. and it’s not steadily climbing as it had been before. This may have also been the source of the problems I’d been having with Entourage.

Putting the UBEE Cable Modem from Time Warner in Bridge Mode

Jared Watkins — Sat, 22 Jan 2011 00:00:00 +0000

Time Warner has been offering faster cable modem speeds lately for much the same price as slower speeds a couple years ago. When I got the new modem I noticed there didn’t seem to be a way to put it in bridge mode to work with the linux router I already had. After a little digging I found that the management page for doing this was ‘branded out’ and the link to it was removed from the interface. The page is still there though… and if you put that url in directly you can still get to it and it still works. If you can read the image the url would be: http://[your modem ip]/T|ModeChange.asp Put that in after you are logged into the management interface which has a default user/pass of ‘user/user’. Hope that helps…

FYI: This is a personal blog.. not a support site for this modem. If you have relevant info to share that’s great but I won’t be approving any more requests for troubleshooting help. Do your own troubleshooting and then come share the results of how to fix some situation you encountered if you like.