Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-20181

MDB docs advise (require?) use of deprecated openssl key derivation method

    XMLWordPrintable

Details

    • Bug
    • Status: Confirmed (View Workflow)
    • Minor
    • Resolution: Unresolved
    • 10.4.6, 10.4
    • 10.4
    • Encryption, SSL
    • None

    Description

      running

      	mysqld -V
      		mysqld Ver 10.4.7-MariaDB-log for Linux on x86_64 (Source distribution)
      	ldd `which mysqld` | grep ssl
      		libssl.so.1.1 => /usr/local/openssl11/lib64/libssl.so.1.1 (0x00007ffa67dd2000)
      		libcrypto.so.1.1 => /usr/local/openssl11/lib64/libcrypto.so.1.1 (0x00007ffa678c2000)
      	openssl version
      		OpenSSL 1.1.1c 28 May 2019
      

      setting up at-rest encryption, encrypting the keyfile

      https://mariadb.com/kb/en/library/file-key-management-encryption-plugin/#encrypting-the-key-fileexec

      , as instructed,

      	openssl -vvv enc -aes-256-cbc \
      	 -pass pass:password \
      	 -md sha1 \
      	 -in  keys.txt \
      	 -out keys.enc
      

      warns

      	*** WARNING : deprecated key derivation used.
      	Using -iter or -pbkdf2 would be better.
      

      Attachments

        Activity

          People

            sanja Oleksandr Byelkin
            pgnd pgnd
            Votes:
            1 Vote for this issue
            Watchers:
            6 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.