[MDEV-17268] Document how to safely decrypt Aria tables Created: 2018-09-21  Updated: 2018-12-22  Resolved: 2018-12-22

Status: Closed
Project: MariaDB Server
Component/s: Documentation - Support, Encryption, Storage Engine - Aria
Fix Version/s: N/A

Type: Task Priority: Major
Reporter: Geoff Montee (Inactive) Assignee: Geoff Montee (Inactive)
Resolution: Fixed Votes: 0
Labels: None

Issue Links:
Blocks
blocks MDEV-17272 Document how to safely disable data-a... Open
blocks MDEV-17273 Document how to safely disable data-a... Open
Relates
relates to MDEV-8040 make aria encryption use real keys Closed
relates to MDEV-14157 Improve documentation of data at rest... Closed
relates to MDEV-17324 Make information_schema table that sh... Open
relates to MDEV-17266 Document how to determine which Aria ... Closed
relates to MDEV-17267 Document how to encrypt Aria tables o... Closed

 Description   

We should document how to safely decrypt Aria tables. The documentation doesn't currently say:

https://mariadb.com/kb/en/library/encrypting-data-for-aria/

As far as I can tell, an Aria table is only non-encrypted if aria_encrypt_tables=OFF was set when it was created. To decrypt an existing encrypted Aria table, it looks like you need to do the following:

1.) Set aria_encrypt_tables=OFF.

SET GLOBAL aria_encrypt_tables=OFF;

Make sure to also set it in the configuration file.

2.) Find all Aria tables that use the PAGE row_format:

SELECT TABLE_SCHEMA, TABLE_NAME 
FROM information_schema.TABLES 
WHERE ENGINE='Aria' 
AND ROW_FORMAT='PAGE'
AND TABLE_SCHEMA != 'information_schema';

3.) For each table in the results,rebuild the table:

ALTER TABLE aria_tab ENGINE=Aria ROW_FORMAT=PAGE;



 Comments   
Comment by Geoff Montee (Inactive) [ 2018-12-20 ]

https://mariadb.com/kb/en/library/encrypting-data-for-aria/#disabling-encryption

Comment by Geoff Montee (Inactive) [ 2018-12-20 ]

jplindst,

Are you familiar with Aria encryption? If so, do the documentation changes look good?

https://mariadb.com/kb/en/library/encrypting-data-for-aria/#disabling-encryption

Comment by Geoff Montee (Inactive) [ 2018-12-20 ]

serg,

I see that you implemented MDEV-8040, so I re-assigned this to you. Please feel free to just close it if the documentation changes look accurate.

Generated at Thu Feb 08 08:35:11 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.