Wednesday, December 4, 2019

Storing keyring_encrypted_file_password settings in extra option file

MySQL configuration file (my.ini or my.cnf) is to define the variables to be used for the server start up.

In MySQL 8.0, we have Persistent Variables which is stored within the data directory as 'mysqld-auto.cnf'


In many cases, using "--defaults-file" for mysqld (or mysqld_safe on linunx) is commonly used. 

e.g.

# mysqld_safe --defaults-file=/data/my.ini &


The my.ini may contain all the settings which is required.   For security reason, the password if it is stored within the same file 'my.ini' may contribute extra risk where accidentally we may send my.ini for troubleshooting. 

Scenario :  MySQL Transparent Encryption with encrypted file keyring (in MySQL Enterprise Edition).  

For Windows :  Define a New File (e.g. my-tde.ini) which includes only the TDE settings

[mysqld]
early-plugin-load=keyring_encrypted_file.dll
keyring_encrypted_file_data=C:/ProgramData/MySQL/3316/mysql-keyring/keyring-encrypted
keyring_encrypted_file_password=password

For the my.ini file, Append a line to include the my-tde.ini.

[mysqld]
<... all other settings...>
!include C:/ProgramData/MySQL/my-tde.ini


On Windows, if !include /path/to/extra.ini is the last line in the file, make sure that a newline is appended at the end or the line will be ignored.

Having extra option file with !include directive, it can reduce the risk by separating the settings between option files.


1 comment:

  1. Given the consistently expanding number of Node.js designers, it's difficult to concoct the one that would match your assumptions. As per a 2016 report by Statista, roughly 31.5% of engineers demonstrated that they incline toward involving Node.js for IoT arrangements. A similar report anticipated that the IoT market would see a 7.3% CAGR through to 2020.

    With more than 6.5 million engineers as of now participated in IoT, plus or minus, 31.5% of the 6.5 million freely converts into multiple million designers when the CAGR whenever calculated in. Area wise, the majority of these engineers are situated in the UK, USA, Brazil, India, Australia, China, and Ukraine>> Mobilunity

    ReplyDelete