Details
-
Bug
-
Status: Closed (View Workflow)
-
Blocker
-
Resolution: Fixed
-
10.1.4
-
None
Description
mysql-test/suite/innodb/t/encrypt-and-grep.test |
-- source include/have_innodb.inc
|
-- source include/have_example_key_management_plugin.inc
|
|
# embedded does not support restart
|
-- source include/not_embedded.inc
|
|
--let $MYSQLD_DATADIR=`select @@datadir`
|
--let ib1_IBD = $MYSQLD_DATADIR/ibdata1
|
--let t1_IBD = $MYSQLD_DATADIR/test/t1.ibd
|
--let t2_IBD = $MYSQLD_DATADIR/test/t2.ibd
|
--let t3_IBD = $MYSQLD_DATADIR/test/t3.ibd
|
--let SEARCH_RANGE = 10000000
|
--let SEARCH_PATTERN=foobar
|
|
SHOW VARIABLES LIKE 'innodb_encrypt%';
|
|
create table t1 (a varchar(255)) engine=innodb encrypted=yes;
|
create table t2 (a varchar(255)) engine=innodb;
|
create table t3 (a varchar(255)) engine=innodb encrypted=no;
|
|
insert t1 values (repeat('foobar', 42));
|
insert t2 values (repeat('foobar', 42));
|
insert t3 values (repeat('foobar', 42));
|
|
--echo # Wait max 10 min for key encryption threads to encrypt all space
|
--let $wait_timeout= 600
|
--let $wait_condition=SELECT COUNT(*) = 0 FROM INFORMATION_SCHEMA.INNODB_TABLESPACES_ENCRYPTION WHERE MIN_KEY_VERSION = 0
|
--source include/wait_condition.inc
|
|
--echo # t1 yes on
|
-- let SEARCH_FILE=$t1_IBD
|
-- source include/search_pattern_in_file.inc
|
--echo # t2 ... on
|
-- let SEARCH_FILE=$t2_IBD
|
-- source include/search_pattern_in_file.inc
|
--echo # t3 no on
|
-- let SEARCH_FILE=$t3_IBD
|
-- source include/search_pattern_in_file.inc
|
--echo # ibdata1
|
-- let SEARCH_FILE=$ib1_IBD
|
-- source include/search_pattern_in_file.inc
|
|
--echo # Now turn off encryption and wait for threads to decrypt everything
|
SET GLOBAL innodb_encrypt_tables = off;
|
|
--echo # Wait max 10 min for key encryption threads to decrypt all space
|
--let $wait_timeout= 600
|
--let $wait_condition=SELECT COUNT(*) = 1 FROM INFORMATION_SCHEMA.INNODB_TABLESPACES_ENCRYPTION WHERE MIN_KEY_VERSION <> 0
|
--source include/wait_condition.inc
|
|
--echo # t1 yes off
|
-- let SEARCH_FILE=$t1_IBD
|
-- source include/search_pattern_in_file.inc
|
--echo # t2 ... off
|
-- let SEARCH_FILE=$t2_IBD
|
-- source include/search_pattern_in_file.inc
|
--echo # t3 no off
|
-- let SEARCH_FILE=$t3_IBD
|
-- source include/search_pattern_in_file.inc
|
--echo # ibdata1
|
-- let SEARCH_FILE=$ib1_IBD
|
-- source include/search_pattern_in_file.inc
|
|
--echo # Turn on encryption
|
SET GLOBAL innodb_encrypt_tables = on;
|
|
--echo # Wait max 10 min for key encryption threads to encrypt all space
|
--let $wait_timeout= 600
|
--let $wait_condition=SELECT COUNT(*) = 0 FROM INFORMATION_SCHEMA.INNODB_TABLESPACES_ENCRYPTION WHERE MIN_KEY_VERSION = 0
|
--source include/wait_condition.inc
|
|
--echo # t1 yes on
|
-- let SEARCH_FILE=$t1_IBD
|
-- source include/search_pattern_in_file.inc
|
--echo # t2 ... on
|
-- let SEARCH_FILE=$t2_IBD
|
-- source include/search_pattern_in_file.inc
|
--echo # t3 no on
|
-- let SEARCH_FILE=$t3_IBD
|
-- source include/search_pattern_in_file.inc
|
--echo # ibdata1
|
-- let SEARCH_FILE=$ib1_IBD
|
-- source include/search_pattern_in_file.inc
|
|
drop table t1, t2, t3;
|
Here my results:
- encryption enabled, the pattern is not found in encrypted tables, it is found in the unencrypted table. It is either found or not (unreliably) in ibdata1 — bug?
- encryption disabled, the pattern is found everywhere, even in the table with encrypted=ON. bug.
- encryption enabled. the pattern is found in all tables — bug, not found in ibdata1.