Details
-
New Feature
-
Status: Closed (View Workflow)
-
Critical
-
Resolution: Fixed
Description
It would be nice if file_key_management supported reading from a named pipe. Currently, it seeks through the file to determine its size before reading it; that's impossible with a named pipe.
Perhaps the plugin could instead read the file in chunks and exit if it has read more than MAX_KEY_FILE_SIZE?
Attachments
Issue Links
- relates to
-
MDEV-35875 Misleading error message for non-existing ENCRYPTION_KEY_ID
-
- Open
-
A key file is a small file with the list of keys, it's not supposed to be more than 1Mb, and if it is — it's considered invalid, that's what the error says.
May be it could be optimized by not reading the file at all in this case, but it's not the code path we need to optimize, so either behavior is fine.
as for 2. — did you try to pipe a >64K file? because the message says "read bytes: 65536, max key file size: 1048576 bytes", so max size is 1Mb.