mirror of
https://github.com/MariaDB/server.git
synced 2025-01-28 01:34:17 +01:00
20c23048c1
Analysis: Problem was that tablespaces not encrypted might not have crypt_data stored on disk. Fixed by always creating crypt_data to memory cache of the tablespace. MDEV-8138: strange results from encrypt-and-grep test Analysis: crypt_data->type is not updated correctly on memory cache. This caused problem with state tranfer on encrypted => unencrypted => encrypted. Fixed by updating memory cache of crypt_data->type correctly based on current srv_encrypt_tables value to either CRYPT_SCHEME_1 or CRYPT_SCHEME_UNENCRYPTED.
42 lines
1.5 KiB
Text
42 lines
1.5 KiB
Text
SET GLOBAL innodb_file_per_table = ON;
|
|
create table t1 (a varchar(255)) engine=innodb encrypted=yes;
|
|
create table t2 (a varchar(255)) engine=innodb;
|
|
create table t3 (a varchar(255)) engine=innodb encrypted=no;
|
|
insert t1 values (repeat('foobar', 42));
|
|
insert t2 values (repeat('temp', 42));
|
|
insert t3 values (repeat('dummy', 42));
|
|
# Wait max 10 min for key encryption threads to encrypt all spaces
|
|
# t1 yes on expecting NOT FOUND
|
|
NOT FOUND /foobar/ in t1.ibd
|
|
# t2 ... on expecting NOT FOUND
|
|
NOT FOUND /temp/ in t2.ibd
|
|
# t3 no on expecting FOUND
|
|
FOUND /dummy/ in t3.ibd
|
|
# ibdata1 expecting NOT FOUND
|
|
NOT FOUND /foobar/ in ibdata1
|
|
# Now turn off encryption and wait for threads to decrypt everything
|
|
SET GLOBAL innodb_encryption_threads = 4;
|
|
SET GLOBAL innodb_encrypt_tables = off;
|
|
# Wait max 10 min for key encryption threads to decrypt all spaces
|
|
# t1 yes on expecting NOT FOUND
|
|
NOT FOUND /foobar/ in t1.ibd
|
|
# t2 ... on expecting FOUND
|
|
FOUND /temp/ in t2.ibd
|
|
# t3 no on expecting FOUND
|
|
FOUND /dummy/ in t3.ibd
|
|
# ibdata1 expecting NOT FOUND
|
|
NOT FOUND /foobar/ in ibdata1
|
|
# Now turn on encryption and wait for threads to encrypt all spaces
|
|
SET GLOBAL innodb_encryption_threads = 4;
|
|
SET GLOBAL innodb_encrypt_tables = on;
|
|
# Wait max 10 min for key encryption threads to encrypt all spaces
|
|
# t1 yes on expecting NOT FOUND
|
|
NOT FOUND /foobar/ in t1.ibd
|
|
# t2 ... on expecting NOT FOUND
|
|
NOT FOUND /temp/ in t2.ibd
|
|
# t3 no on expecting FOUND
|
|
FOUND /dummy/ in t3.ibd
|
|
# ibdata1 expecting NOT FOUND
|
|
NOT FOUND /foobar/ in ibdata1
|
|
# TODO: add shutdown + grep tests
|
|
drop table t1, t2, t3;
|