Details
-
New Feature
-
Status: Done
-
High
-
Resolution: Fixed
-
5.7.x, 8.0.x
-
None
-
None
-
Yes
Description
Currently Percona system keys are generated without GUUIDs in their names, unlike Master Keys. For instance Binlog Percona System key (schema 1) has name: percona_binlog:1. This should be changed to percona_binlog_UUID:1 (schema 2). The previous design (without UUID in keys names) was based on assumption that there is a per server separation of keyrings. However, after PL2019 I realized that there is a little interest in this topic and can be easily overlooked since Master Key encryption works without this separation. Because of that we decided to change the naming schema so it would include server's UUID. This means that 5.7 binlog encryption will have to work with both naming schemas - old one (schema 1) without UUID in its name and the new one - schema 2 with UUID in its name. We will introduce schema 2 binlog encryption in 5.7 as part of this ticket.