The Ultimate Guide to High Availability with MariaDB

Encryption Innodb

You are viewing an old version of this question. View the current version here.

I have setup MariaDB to encrypt the whole InnoDB space. Here's what's in my.cnf

    plugin-load-add=file_key_management.so
    file-key-management-filename=/var/lib/mysql/keys.txt
    file_key_management_encryption_algorithm=AES_CBC
    innodb_buffer_pool_size = 5G
    innodb_thread_concurrency = 8
    innodb_flush_log_at_trx_commit = 2
    innodb_flush_method = O_DIRECT
    sql_mode=ANSI_QUOTES,NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES
    innodb-encrypt-tables
    innodb-encrypt-log
    innodb-encryption-threads = 4
    innodb-tablespaces-encryption

After editing the my.cnf I restarted mariadb. However, when I tried to run this query

    select * from information_schema.innodb_tablespaces_encryption
    where encryption_scheme = 1

it did not come up with any result. Also, I tired creating a new table and it was not encrypted as I was able to open the data file and see the data.

Am I missing anything?

Answer

I had the same problem on http://www.multilang.space/ while encrypting similar table. Try to regenerate keys and this should be fine.

Comments

Comments loading...
Content reproduced on this site is the property of its respective owners, and this content is not reviewed in advance by MariaDB. The views, information and opinions expressed by this content do not necessarily represent those of MariaDB or any other party.