Uploaded image for project: 'Percona Server for MySQL'
  1. Percona Server for MySQL
  2. PS-5729

Added server's UUID to Percona system keys.

Details

    • New Feature
    • Status: Done
    • High
    • Resolution: Fixed
    • 5.7.x, 8.0.x
    • 8.0.19-10
    • None
    • None
    • Yes

    Description

      Currently Percona system keys are generated without GUUIDs in their names, unlike Master Keys. For instance Binlog Percona System key (schema 1) has name: percona_binlog:1. This should be changed to percona_binlog_UUID:1 (schema 2). The previous design (without UUID in keys names) was based on assumption that there is a per server separation of keyrings. However, after PL2019 I realized that there is a little interest in this topic and can be easily overlooked since Master Key encryption works without this separation. Because of that we decided to change the naming schema so it would include server's UUID. This means that 5.7 binlog encryption will have to work with both naming schemas - old one (schema 1) without UUID in its name and the new one - schema 2 with UUID in its name. We will introduce schema 2 binlog encryption in 5.7 as part of this ticket.

      Attachments

        Activity

          People

            robert.golebiowski Robert Golebiowski (Inactive)
            robert.golebiowski Robert Golebiowski (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - Not Specified
                Not Specified
                Logged:
                Time Spent - 6 weeks, 2 days, 4 hours, 20 minutes
                6w 2d 4h 20m

                Smart Checklist