Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Incomplete
-
10.7.3
-
None
-
RHEL8.5 x86_64
Description
After an upgrade to 10.7.3-1 I have attempted to add a new database using "mysql -uroot -p brgtest2_db < daily_brg_db.sql" which fails with errors like "ERROR 2013 (HY000) at line 13654: Lost connection to server during query"
After several re installs of 10.7.3-1 and many test restores I have found that this only occurs after I re-enable data-at-rest encryption. Before data-at-rest is enabled the mysql dump restore works as expected without error on 10.7.3-1.
This issue has only manifested after an uninstall/reinstall upgrade from 10.6.7-1 to 10.7.3-1. The same procedure did not generate errors when I restored a dump to 10.6.7-1 with data-at-rest encryption enabled.
Any guidance as why this is happening would be greatly appreciated.
–
Data at rest encryption is being enabled with:
- File Key Management
plugin_load_add = file_key_management
loose_file_key_management_filename = /etc/my.cnf.d/encryption/keyfile.enc
loose_file_key_management_filekey = FILE:/etc/my.cnf.d/encryption/keyfile.key
loose_file_key_management_encryption_algorithm = AES_CTR
- InnoDB/XtraDB Encryption
innodb_encrypt_tables = ON
innodb_encrypt_temporary_tables = ON
innodb_encrypt_log = ON
innodb_encryption_threads = 4
innodb_encryption_rotate_key_age = 1
- TLS
ssl_cert = /etc/my.cnf.d/encryption/server-cert.pem
ssl_key = /etc/my.cnf.d/encryption/server-key.pem
ssl_ca = /etc/my.cnf.d/encryption/ca.pem
tls_version = TLSv1.2,TLSv1.3
Attachments
Issue Links
- relates to
-
MDEV-28679 After upgrade to 10.7.3-1 with enabled data-at-rest encryption unable to restore dump file.
- Closed