MySQL Forums
Forum List  »  Security

How to generate a keyring file when using tde?
Posted by: Pan Neil
Date: March 14, 2017 03:08AM

Hi,

I want to test tde feature on my pc, according to below links:

https://dev.mysql.com/doc/refman/5.7/en/innodb-tablespace-encryption.html
https://dev.mysql.com/doc/refman/5.7/en/keyring.html

I installed mysql-sever and mysql-client, which versions is 5.1.17 on Ubuntu 1604.

then I setup my.cnf (/etc/mysql/my.cnf), added keyring configurations, and mkdir as /usr/share/mysql/mysql-keyring, chown it's right to mysql.

then, restart mysql by sudo systemctl stop/start mysql,

then, I login by mysql -uroot -p, create database db1, use db1,

until now it looks all good, but when i create table t1(id int) encryption='Y', I got an error that:

ERROR 3185(HY000): Can't find master key from keyring, please check keyring plugin is loaded.

but if i run "create table t1(id int) encryption='Y' ", it works,

I'm confused because i run select plugin_name, plugin_status from xxx.plugin,
I see keyfile plugin is running, alive.

You said that there should be a file "keyring" store master key, and it is
/usr/share/mysql/mysql-keyring/keyring, now my question are:

1) Should the file "keyring" be empty?

2) If not, what is the file format, and what should be stored in it, is there a sample?

3)If it should be empty, what should i do for fix the issue?

Please help me and i've read all your documents and google all possible answers but i had not get an solution.

Options: ReplyQuote


Subject
Views
Written By
Posted
How to generate a keyring file when using tde?
4512
March 14, 2017 03:08AM


Sorry, you can't reply to this topic. It has been closed.

Content reproduced on this site is the property of the respective copyright holders. It is not reviewed in advance by Oracle and does not necessarily represent the opinion of Oracle or any other party.