The Ultimate Guide to High Availability with MariaDB

Comments - File Key Management Encryption Plugin

2 years, 3 months ago Tom H.
Re: File Key Management Encryption Plugin

The following command under https://mariadb.com/kb/en/file-key-management-encryption-plugin/#encrypting-the-key-file

$ sudo openssl enc -aes-256-cbc -md sha1 \
   -pass file:/etc/mysql/encryption/keyfile.key \
   -in /etc/mysql/encryption/keyfile \
   -out /etc/mysql/encryption/keyfile.enc

...produces...

*** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.

Can anyone please provide the correct/updated command?

 
2 years ago Daniel Black
Re: File Key Management Encryption Plugin

This is covered in MDEV-20181, an enhancement to this file key management plugin is required to understand these newer formats. Contributions encouraged, especially those that preserve backwards compatibility.

 
Content reproduced on this site is the property of its respective owners, and this content is not reviewed in advance by MariaDB. The views, information and opinions expressed by this content do not necessarily represent those of MariaDB or any other party.