Comments - InnoDB System Variables

4 months, 1 week ago Patrick Winnem

I believe there is an error in innodb_encryption_rotate_key_age:
https://mariadb.com/kb/en/innodb-system-variables/#innodb_encryption_rotate_key_age

Which states:
When setting up encryption, this variable must be set to a non-zero value. Otherwise, when you enable encryption through innodb_encrypt_tables MariaDB won't be able to automatically encrypt any unencrypted tables.

If i read MDEV-14398 it seems that this was fixed, but im not sure?
And i think its very relevant for me now as im going to disable encryption on a server, following: https://mariadb.com/kb/en/disabling-innodb-encryption/ Which states that we must:
SET GLOBAL innodb_encryption_rotate_key_age = 1;
I have this at 0 as we dont rotate the keys...

 
4 months, 1 week ago Patrick Winnem

Just to semi-correct myself: The above MDEV is listed as only affecting 10.1, 10.2, 10.3, so the text for innodb_encryption_rotate_key_age might be correct for these versions, but not later releases..
If so, it should be made clear in the KB , and in the referencing article regarding disable encryption, that you only need to change this for those versions, and can leave it at 0 for later versions.

 
Content reproduced on this site is the property of its respective owners, and this content is not reviewed in advance by MariaDB. The views, information and opinions expressed by this content do not necessarily represent those of MariaDB or any other party.