Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-9035

Plugin plugin-load-add=file_key_management_plugin.so not loading variable values

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Not a Bug
    • Affects Version/s: 10.1.8
    • Fix Version/s: N/A
    • Component/s: Encryption
    • Labels:
    • Environment:
      VMWARE 12 - Centos 7 - MariaDB 10.1.8

      Description

      Sample of my.cnf file:

      [mysqld]
      plugin-load-add=file_key_management.so
      file_key_management
      file_key_management_filename = /home/mdb/mariadb_keys.enc
      file_key_management_filekey = FILE:/home/mdb/mariadb_keys.txt
      file_key_management_encryption_algorithm=AES_CBC
      #innodb-encrypt-tables
      #innodb-encrypt-log
      #innodb-encryption-threads=4

      MariaDB starts successfully. If I un-comment any of the #innodb-encrypt variables, I get errors starting MariaDB.

      I kept the #innodb-encrypt variables commented and started MariaDB. I then looked up the variables to see if the plugin loaded the values.

      MariaDB [TEST_ENC_DB]> SHOW VARIABLES LIKE '%_key%';
      +----------------------------------+------------+
      | Variable_name                    | Value      |
      +----------------------------------+------------+
      | delay_key_write                  | ON         |
      | foreign_key_checks               | ON         |
      | have_rtree_keys                  | YES        |
      | innodb_default_encryption_key_id | 1          |
      | innodb_encryption_rotate_key_age | 1          |
      | innodb_force_primary_key         | OFF        |
      | max_seeks_for_key                | 4294967295 |
      | ssl_key                          |            |
      +----------------------------------+------------+
      8 rows in set (0.00 sec)

      I can't see the "file_key_management" variables. I even went ahead and tried to encrypt a table as a test:

      MariaDB [TEST_ENC_DB]> USE TEST_ENC_DB;
      Database changed
       
      MariaDB [TEST_ENC_DB]> SHOW TABLES;
      +-----------------------+
      | Tables_in_TEST_ENC_DB |
      +-----------------------+
      | TBL_BOOKS             |
      +-----------------------+
      1 row in set (0.00 sec)
       
      MariaDB [TEST_ENC_DB]> ALTER TABLE TBL_BOOKS ENCRYPTED=YES ENCRYPTION_KEY_ID=1;
      ERROR 1005 (HY000): Can't create table `TEST_ENC_DB`.`#sql-15a7_3` (errno: 140 "Wrong create options")

        Attachments

          Activity

            People

            Assignee:
            Unassigned
            Reporter:
            jrodriguez Jo-Ann M Rodriguez
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: