Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-8813

Allow mysqlbinlog read encrypted binary logs

Details

    Description

      Allow mysqlbinlog decrypt binary logs.

      Attachments

        Issue Links

          duplicates

          Task - A task that needs to be done. MDEV-9418 mysqlbinlog can't decryption the encrypted binlog

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          relates to

          Task - A task that needs to be done. MDEV-20098 Implement key rotation for binary log and relay log

          • Major - Major loss of function.
          • Open

          Activity

            Ascending order - Click to sort in descending order
            elenst Elena Stepanova created issue -
            elenst Elena Stepanova made changes -
            Field Original Value New Value
            Description We really need to have it before GA. Allow mysqlbinlog decrypt binary logs.
            We really need to have it before GA.
            elenst Elena Stepanova made changes -
            psergei Sergei Petrunia made changes -
            Priority Critical [ 2 ] Major [ 3 ]
            serg Sergei Golubchik made changes -
            Description Allow mysqlbinlog decrypt binary logs.
            We really need to have it before GA.             		Allow mysqlbinlog decrypt binary logs.
            serg Sergei Golubchik made changes -
            serg Sergei Golubchik made changes -
            Fix Version/s 10.1 [ 16100 ]
            ralf.gebhardt Ralf Gebhardt added a comment -

            The current option to get binary logs decrypted is mysqlbinlog used with the parameter --read-from-remote-server, as only the server has access to the keys via the Encryption Plugin API and Plugin. Be aware this adds load to the server.

            ralf.gebhardt Ralf Gebhardt added a comment - The current option to get binary logs decrypted is mysqlbinlog used with the parameter --read-from-remote-server, as only the server has access to the keys via the Encryption Plugin API and Plugin. Be aware this adds load to the server.
            GeoffMontee Geoff Montee (Inactive) added a comment -

            I added a note about this to the documentation:

            https://mariadb.com/kb/en/library/encrypting-binary-logs/#effects-of-encryption-on-mysqlbinlog

            GeoffMontee Geoff Montee (Inactive) added a comment - I added a note about this to the documentation: https://mariadb.com/kb/en/library/encrypting-binary-logs/#effects-of-encryption-on-mysqlbinlog
            GeoffMontee Geoff Montee (Inactive) made changes -
            serg Sergei Golubchik made changes -
            Workflow MariaDB v3 [ 71648 ] MariaDB v4 [ 130380 ]
            rpizzi Rick Pizzi (Inactive) added a comment - - edited

            Just found out that there is NO WAY to read encrypted relay logs from outside the server. We really need to add decode capabilities to mysqlbinlog tool instead of relying on server to do the decode.

            rpizzi Rick Pizzi (Inactive) added a comment - - edited Just found out that there is NO WAY to read encrypted relay logs from outside the server. We really need to add decode capabilities to mysqlbinlog tool instead of relying on server to do the decode.
            mariadb-jira-automation Jira Automation (IT) made changes -
            Zendesk Related Tickets 192154

            People

              serg Sergei Golubchik
              elenst Elena Stepanova
              Votes:
              11 Vote for this issue
              Watchers:
              17 Start watching this issue

              Dates

                Created:
                Updated:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.