Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-17268

Document how to safely decrypt Aria tables

    XMLWordPrintable

Details

    Description

      We should document how to safely decrypt Aria tables. The documentation doesn't currently say:

      https://mariadb.com/kb/en/library/encrypting-data-for-aria/

      As far as I can tell, an Aria table is only non-encrypted if aria_encrypt_tables=OFF was set when it was created. To decrypt an existing encrypted Aria table, it looks like you need to do the following:

      1.) Set aria_encrypt_tables=OFF.

      SET GLOBAL aria_encrypt_tables=OFF;

      Make sure to also set it in the configuration file.

      2.) Find all Aria tables that use the PAGE row_format:

      SELECT TABLE_SCHEMA, TABLE_NAME 
      FROM information_schema.TABLES 
      WHERE ENGINE='Aria' 
      AND ROW_FORMAT='PAGE'
      		 
      AND TABLE_SCHEMA != 'information_schema';

      3.) For each table in the results,rebuild the table:

      ALTER TABLE aria_tab ENGINE=Aria ROW_FORMAT=PAGE;

      Attachments

        Issue Links

          blocks

          Task - A task that needs to be done. MDEV-17272 Document how to safely disable data-at-rest encryption in Galera Cluster

          • Major - Major loss of function.
          • Open

          Task - A task that needs to be done. MDEV-17273 Document how to safely disable data-at-rest encryption in standalone server

          • Major - Major loss of function.
          • Open
          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-8040 make aria encryption use real keys

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MDEV-14157 Improve documentation of data at rest encryption

          • Major - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. MDEV-17324 Make information_schema table that shows which Aria tables are encrypted

          • Major - Major loss of function.
          • Open

          Task - A task that needs to be done. MDEV-17266 Document how to determine which Aria tables are encrypted

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-17267 Document how to encrypt Aria tables on existing server

          • Major - Major loss of function.
          • Closed

          Activity

            People

              GeoffMontee Geoff Montee (Inactive)
              GeoffMontee Geoff Montee (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.