Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-28321

After upgrade to 10.7.3-1 and renabling of data-at-rest encryption unable to restore dump file.

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Incomplete
    • Affects Version/s: 10.7.3
    • Fix Version/s: N/A
    • Component/s: N/A
    • Labels:
      None
    • Environment:
      RHEL8.5 x86_64

      Description

      After an upgrade to 10.7.3-1 I have attempted to add a new database using "mysql -uroot -p brgtest2_db < daily_brg_db.sql" which fails with errors like "ERROR 2013 (HY000) at line 13654: Lost connection to server during query"

      After several re installs of 10.7.3-1 and many test restores I have found that this only occurs after I re-enable data-at-rest encryption. Before data-at-rest is enabled the mysql dump restore works as expected without error on 10.7.3-1.

      This issue has only manifested after an uninstall/reinstall upgrade from 10.6.7-1 to 10.7.3-1. The same procedure did not generate errors when I restored a dump to 10.6.7-1 with data-at-rest encryption enabled.

      Any guidance as why this is happening would be greatly appreciated.

      –
      Data at rest encryption is being enabled with:

      1. File Key Management
        plugin_load_add = file_key_management
        loose_file_key_management_filename = /etc/my.cnf.d/encryption/keyfile.enc
        loose_file_key_management_filekey = FILE:/etc/my.cnf.d/encryption/keyfile.key
        loose_file_key_management_encryption_algorithm = AES_CTR
      1. InnoDB/XtraDB Encryption
        innodb_encrypt_tables = ON
        innodb_encrypt_temporary_tables = ON
        innodb_encrypt_log = ON
        innodb_encryption_threads = 4
        innodb_encryption_rotate_key_age = 1
      1. TLS
        ssl_cert = /etc/my.cnf.d/encryption/server-cert.pem
        ssl_key = /etc/my.cnf.d/encryption/server-key.pem
        ssl_ca = /etc/my.cnf.d/encryption/ca.pem

      tls_version = TLSv1.2,TLSv1.3

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              danblack Daniel Black
              Reporter:
              roland Roland Sambain
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.