Details
-
Bug
-
Status: Done
-
High
-
Resolution: Fixed
-
8.0.15-6, 5.7.26-29
-
None
Description
It is noticed while testing PS-4556, that below queries are actually executable
set global innodb_redo_log_encrypt =2;
set global innodb_redo_log_encrypt =3;
set global innodb_redo_log_encrypt =true;
However, as per functionality the only supported values must be
ON, OFF, master_key, keyring_key
Values 1,2,3,true,on all sets the value to "on"
Ideally, setting these values make no sense and must be restricted.
Second observation is:
mysql> show global variables like 'innodb%encrypt%';
---------------------------------------+
Variable_name | Value |
---------------------------------------+
innodb_default_encryption_key_id | 0 |
innodb_encrypt_online_alter_logs | OFF |
innodb_encrypt_tables | OFF |
innodb_encryption_rotate_key_age | 1 |
innodb_encryption_rotation_iops | 100 |
innodb_encryption_threads | 0 |
innodb_parallel_dblwr_encrypt | OFF |
innodb_redo_log_encrypt | off |
innodb_sys_tablespace_encrypt | OFF |
innodb_temp_tablespace_encrypt | OFF |
innodb_undo_log_encrypt | OFF |
---------------------------------------+
For the sake of uniformity, the default value must be in uppercase "OFF"
Attachments
Issue Links
- blocks
-
PS-4556 Implement redo log encryption
-
- Done
-