Gecko [ www.jdcpatala.org ]

Name	Size	Permission
access_credential_control-mast...	170 B	-rw-r--r--
access_credential_control.test	27.33 KB	-rw-r--r--
cert_verify.test	2.17 KB	-rw-r--r--
early_plugin_load-master.opt	23 B	-rw-r--r--
early_plugin_load.test	1.17 KB	-rw-r--r--
install_keyring_file-master.op...	73 B	-rw-r--r--
install_keyring_file.test	1.21 KB	-rw-r--r--
key_rotation.test	622 B	-rw-r--r--
key_rotation_qa-master.opt	20 B	-rw-r--r--
key_rotation_qa.test	9.02 KB	-rw-r--r--
key_value_auth-master.opt	170 B	-rw-r--r--
key_value_auth.test	23.04 KB	-rw-r--r--
keyring_file_data-master.opt	93 B	-rw-r--r--
keyring_file_data.test	1.18 KB	-rw-r--r--
keyring_file_data_qa-master.op...	73 B	-rw-r--r--
keyring_file_data_qa.test	2.84 KB	-rw-r--r--
keyring_udf-master.opt	37 B	-rw-r--r--
keyring_udf.test	5.2 KB	-rw-r--r--
multiple_plugins-master.opt	225 B	-rw-r--r--
multiple_plugins.test	505 B	-rw-r--r--
mysql_native_plugin.test	24.09 KB	-rw-r--r--
mysql_no_login-master.opt	20 B	-rw-r--r--
mysql_no_login.test	4.56 KB	-rw-r--r--
mysql_protocol_types.test	6.42 KB	-rw-r--r--
mysql_protocol_types_windows-m...	50 B	-rw-r--r--
mysql_protocol_types_windows.t...	3.38 KB	-rw-r--r--
mysql_sha256_plugin-master.opt	170 B	-rw-r--r--
mysql_sha256_plugin.test	21.21 KB	-rw-r--r--
mysql_ssl_connection-master.op...	35 B	-rw-r--r--
mysql_ssl_connection.test	418 B	-rw-r--r--
mysql_ssl_rsa_setup.test	12.05 KB	-rw-r--r--
named_pipe_ssl-master.opt	26 B	-rw-r--r--
named_pipe_ssl.test	959 B	-rw-r--r--
openssl_cert_generation-master...	39 B	-rw-r--r--
openssl_cert_generation.test	18.35 KB	-rw-r--r--
openssl_cert_generation_debug....	3.91 KB	-rw-r--r--
openssl_cert_generation_subjec...	39 B	-rw-r--r--
openssl_cert_generation_subjec...	3.37 KB	-rw-r--r--
openssl_cert_validity-master.o...	67 B	-rw-r--r--
openssl_cert_validity.test	590 B	-rw-r--r--
openssl_skip_cert_generation-m...	67 B	-rw-r--r--
openssl_skip_cert_generation.t...	2.46 KB	-rw-r--r--
password_expired-master.opt	170 B	-rw-r--r--
password_expired.test	22.89 KB	-rw-r--r--
password_expiry.test	7.69 KB	-rw-r--r--
require_secure_transport.test	3.15 KB	-rw-r--r--
require_secure_transport_windo...	50 B	-rw-r--r--
require_secure_transport_windo...	5.81 KB	-rw-r--r--
secure_file_priv_error.test	1.61 KB	-rw-r--r--
secure_file_priv_null-master.o...	24 B	-rw-r--r--
secure_file_priv_null.test	1.47 KB	-rw-r--r--
secure_file_priv_warnings-mast...	22 B	-rw-r--r--
secure_file_priv_warnings.test	2.18 KB	-rw-r--r--
secure_file_priv_warnings_not_...	1.22 KB	-rw-r--r--
secure_file_priv_warnings_win....	1.45 KB	-rw-r--r--
server_withssl_client_withouts...	405 B	-rw-r--r--
server_withssl_client_withouts...	11.95 KB	-rw-r--r--
server_withssl_client_withssl-...	405 B	-rw-r--r--
server_withssl_client_withssl....	15.89 KB	-rw-r--r--
set_password_deprecated.test	2.67 KB	-rw-r--r--
ssl_auto_detect-master.opt	124 B	-rw-r--r--
ssl_auto_detect.test	5.22 KB	-rw-r--r--
ssl_auto_detect_openssl-master...	118 B	-rw-r--r--
ssl_auto_detect_openssl.test	2.62 KB	-rw-r--r--
ssl_mode.test	9.47 KB	-rw-r--r--
tls.test	4.45 KB	-rw-r--r--
tls12_tls1.test	2.33 KB	-rw-r--r--
wrong_keyring_file_data-master...	90 B	-rw-r--r--
wrong_keyring_file_data.test	806 B	-rw-r--r--

Code Editor : key_rotation_qa.test

# Wl8821 Testing
# This test will will check parser support for
# ALTER INSTANCE ROTATE <key_type> MASTER KEY statement
# and key rotation testing.

--source include/not_embedded.inc
--source include/no_valgrind_without_big.inc
--source include/have_innodb.inc
call mtr.add_suppression("\\[Error\\] InnoDB: Encryption can't find master key, please check the keyring plugin is loaded.");
call mtr.add_suppression("\\[Error\\] Plugin keyring_file reported: 'keyring_file initialization failure.");
call mtr.add_suppression("\\[Error\\] Function 'keyring_file' already exists");
call mtr.add_suppression("\\[Error\\] Couldn't load plugin named 'keyring_file' with soname 'keyring_file.so'.");
call mtr.add_suppression("\\[ERROR\\] Couldn't load plugin named 'keyring_file' with soname 'keyring_file.dll'.");
call mtr.add_suppression("\\[Error\\] InnoDB: Can't generate new master key, please check the keyring plugin is loaded.");
call mtr.add_suppression("\\[Error\\] InnoDB: Encryption information in datafile");
call mtr.add_suppression("\\[Error\\] InnoDB: Operating system error number 2 in a file operation.");
call mtr.add_suppression("\\[Error\\] InnoDB: The error means the system cannot find the path specified.");
call mtr.add_suppression("\\[Error\\] InnoDB: Could not find a valid tablespace file for");
call mtr.add_suppression("\\[Error\\] InnoDB: If you are installing InnoDB, remember that you must create directories yourself, InnoDB does not create them.");
call mtr.add_suppression("\\[Error\\] InnoDB: Can't generate new master key for tablespace encryption, please check the keyring plugin is loaded.");
call mtr.add_suppression("\\[Warning\\] InnoDB: Ignoring tablespace `test/.*` because it could not be opened.");
call mtr.add_suppression("\\[Error\\] InnoDB: Failed to find tablespace for table");
call mtr.add_suppression("\\[Warning\\] InnoDB: Can't read encryption key from file");
call mtr.add_suppression("\\[Warning\\] InnoDB: Cannot open table .* from the internal data dictionary of InnoDB though the .frm file for the table exists.*");
call mtr.add_suppression("Could not flush keys to keyring's backup");

# Invalid syntax
--error ER_PARSE_ERROR
ALTER INSTANCE ROTATE MYISAM MASTER KEY;
--error ER_PARSE_ERROR
ALTER INSTANCE ROTATE INNODB;
--error ER_PARSE_ERROR
ALTER INSTANCE STORE INNDB;
--error ER_PARSE_ERROR
ALTER INSTANCE ROTATE INNODB SLAVE KEY;

# When keyring_file plugin not loaded.
--error ER_CANNOT_FIND_KEY_IN_KEYRING
ALTER INSTANCE ROTATE INNODB MASTER KEY;

--error 0,1
--remove_file $MYSQL_TMP_DIR/keyring

--echo
# Re-starting mysql server with keyring_file plugin.
--exec echo "wait" > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect
-- send_shutdown
-- source include/wait_until_disconnected.inc
--exec echo "restart:--early-plugin-load="keyring_file=$KEYRING_PLUGIN" --keyring_file_data=$MYSQL_TMP_DIR/keyring/keyring" > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect
--enable_reconnect
--source include/wait_until_connected_again.inc
--disable_reconnect

--error ER_UDF_EXISTS
INSTALL PLUGIN keyring_file SONAME 'keyring_file.so';

--echo
SHOW GLOBAL variables LIKE 'early-plugin-load';
# Command-Line option.
--error ER_PARSE_ERROR
SET @@global.early-plugin-load="keyring_file=keyring_file.so";

--echo
# Check keyring_file plugin.
query_vertical SELECT PLUGIN_NAME,PLUGIN_VERSION,PLUGIN_STATUS
FROM INFORMATION_SCHEMA.PLUGINS WHERE plugin_name='keyring_file';
# Check if empty keyring file was not created
--file_exists $MYSQL_TMP_DIR/keyring/keyring
--echo

# Roating master key when keyring file is empty.
# It should genereate new master key.
ALTER INSTANCE ROTATE INNODB MASTER KEY;

# Creating table with encryption.
CREATE TABLE t1(c1 INT, c2 char(20)) ENCRYPTION="Y" ENGINE = InnoDB;
INSERT INTO t1 VALUES(0, "aaaaa");
INSERT INTO t1 VALUES(1, "bbbbb");
INSERT INTO t1 VALUES(2, "ccccc");
SELECT * FROM t1;

ALTER INSTANCE ROTATE INNODB MASTER KEY;

CREATE TABLE t2(c1 INT, c2 char(20)) ENCRYPTION="Y" ENGINE = InnoDB;
INSERT INTO t2 SELECT * FROM t1;
SELECT COUNT(*) FROM t2;

--echo # Remove keyring file.
# If we remove the keyring file and the server
# is still running the keyring will stay in the memory
# and the encrypted table/s will be accessible.
--copy_file $MYSQL_TMP_DIR/keyring/keyring $MYSQL_TMP_DIR/keyring/keyring_tmp
--remove_file $MYSQL_TMP_DIR/keyring/keyring
--echo
--echo # Check for keyring file.
--list_files $MYSQL_TMP_DIR/keyring/
--echo
SELECT COUNT(*) FROM t2;
CREATE TABLE t3(c1 INT, c2 char(20)) ENCRYPTION="Y" ENGINE = InnoDB;
INSERT INTO t3 VALUES(2, "ccccc");

--echo # Check for keyring file.
--list_files $MYSQL_TMP_DIR/keyring/
--echo

# ALTER INSTANCE ROTATE cmd will fail if keyring file
# does not exist
--ERROR ER_CANNOT_FIND_KEY_IN_KEYRING
ALTER INSTANCE ROTATE INNODB MASTER KEY;

--echo # Check for keyring file.
--list_files $MYSQL_TMP_DIR/keyring/
--error 1
--file_exists $MYSQL_TMP_DIR/keyring/keyring
--echo
SELECT * FROM t1;

# Uninstalling keyring_file plugin.
UNINSTALL PLUGIN keyring_file;
query_vertical SELECT PLUGIN_NAME,PLUGIN_VERSION,PLUGIN_STATUS
FROM INFORMATION_SCHEMA.PLUGINS WHERE plugin_name='keyring_file';

--echo # Try to access encrypted table.
# Cached the tablespace key in memory.
SELECT COUNT(*) FROM t1;
SELECT * FROM t2;

CREATE TABLE t10(c1 INT, c2 char(20)) ENGINE = InnoDB;

# Recreate the keyring file
--copy_file $MYSQL_TMP_DIR/keyring/keyring_tmp $MYSQL_TMP_DIR/keyring/keyring
--remove_file $MYSQL_TMP_DIR/keyring/keyring_tmp

# After restart encrypted table/s should be accessible
# when using same keyring file.
let $restart_parameters = restart: --early-plugin-load="keyring_file=$KEYRING_PLUGIN" --keyring_file_data=$MYSQL_TMP_DIR/keyring/keyring;
--replace_result $MYSQL_TMP_DIR MYSQL_TMP_DIR $KEYRING_PLUGIN keyring_file.so
--source include/restart_mysqld.inc
--file_exists $MYSQL_TMP_DIR/keyring/keyring
SELECT * FROM t1;
SELECT * FROM t3;
--remove_file $MYSQL_TMP_DIR/keyring/keyring

# After restart old encrypted tables will not be not accesiable,
# if keyring file missing or keyring_file_data location changed.
let $restart_parameters = restart: --early-plugin-load="keyring_file=$KEYRING_PLUGIN" --keyring_file_data=$MYSQL_TMP_DIR/keyring/keyring_new;
--replace_result $MYSQL_TMP_DIR MYSQL_TMP_DIR $KEYRING_PLUGIN keyring_file.so
--source include/restart_mysqld.inc
--error ER_CANNOT_FIND_KEY_IN_KEYRING
SELECT * FROM t1;

CREATE TABLE t12(c1 INT, c2 char(20)) ENCRYPTION="Y" ENGINE = InnoDB;
INSERT INTO t12 VALUES(2, "ccccchfc");

ALTER INSTANCE ROTATE INNODB MASTER KEY;

SELECT * FROM t12;
--remove_file $MYSQL_TMP_DIR/keyring/keyring_new

# Test keyring_file with early-plugin-load and plugin-load.
--exec echo "wait" > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect
-- send_shutdown
-- source include/wait_until_disconnected.inc
--exec echo "restart:--early-plugin-load="keyring_file=$KEYRING_PLUGIN" --plugin-load="keyring_file=$KEYRING_PLUGIN" --keyring_file_data=$MYSQL_TMP_DIR/keyring/keyring" > $MYSQLTEST_VARDIR/tmp/mysqld.1.expect
--enable_reconnect
--source include/wait_until_connected_again.inc
--disable_reconnect

query_vertical SELECT PLUGIN_NAME,PLUGIN_VERSION,PLUGIN_STATUS
FROM INFORMATION_SCHEMA.PLUGINS WHERE plugin_name='keyring_file';

--error ER_CANNOT_FIND_KEY_IN_KEYRING
SELECT * FROM t2;

CREATE TABLE t11(c1 INT, c2 char(20)) ENCRYPTION="Y" ENGINE = InnoDB;

# Table will not be accesiable,since the original key file is removed,
# Innodb will mark is as data file missing.
--error ER_CANNOT_FIND_KEY_IN_KEYRING
SELECT * FROM t2;

# Uninstalling keyring_file plugin.
UNINSTALL PLUGIN keyring_file;
query_vertical SELECT PLUGIN_NAME,PLUGIN_VERSION,PLUGIN_STATUS
FROM INFORMATION_SCHEMA.PLUGINS WHERE plugin_name='keyring_file';

SELECT * FROM t11;
# Try to access encrypted table, Which are created before restart.
--error ER_CANNOT_FIND_KEY_IN_KEYRING
SELECT COUNT(*) FROM t1;

# Creating table after uninstalling keyring_file plugin.
--error ER_CANNOT_FIND_KEY_IN_KEYRING
CREATE TABLE t4(c1 INT, c2 char(20)) ENCRYPTION="Y" ENGINE = InnoDB;

# ALTER INSTANCE ROTATE <key_type> MASTER KEY statement,after UNINSTALL.
--error ER_CANNOT_FIND_KEY_IN_KEYRING
ALTER INSTANCE ROTATE INNODB MASTER KEY;

# Creating table without encryption.
CREATE TABLE t5(c1 INT, c2 char(20)) ENGINE = InnoDB;
INSERT INTO t5 VALUES(100, "without_enc");

# Uninstall will not remove keyring file.
--list_files $MYSQL_TMP_DIR/keyring/
--file_exists $MYSQL_TMP_DIR/keyring/keyring

--remove_file $MYSQL_TMP_DIR/keyring/keyring

# Encrypted table DROP when keyring_file plugin missing/removed.
DROP TABLE t11;

--replace_regex /\.dll/.so/
eval INSTALL PLUGIN keyring_file SONAME '$KEYRING_PLUGIN';
--replace_result $MYSQL_TMP_DIR MYSQL_TMP_DIR
eval SET @@global.keyring_file_data='$MYSQL_TMP_DIR/keyring/keyring';
query_vertical SELECT PLUGIN_NAME,PLUGIN_VERSION,PLUGIN_STATUS
FROM INFORMATION_SCHEMA.PLUGINS WHERE plugin_name='keyring_file';

--error ER_CANNOT_FIND_KEY_IN_KEYRING
CREATE TABLE t6(c1 INT, c2 char(20)) ENCRYPTION="Y" ENGINE = InnoDB;

--error ER_CANNOT_FIND_KEY_IN_KEYRING
ALTER INSTANCE ROTATE INNODB MASTER KEY;

--error ER_CANNOT_FIND_KEY_IN_KEYRING
SELECT * FROM t3;
--echo
## Try to access non-encrypted table.
SELECT * FROM t5;

# Cleanup
DROP TABLE t1,t2,t3,t5,t12,t10;
--echo #End:

${this.title}

Code Editor : key_rotation_qa.test