Re: [Maria-discuss] AWS Key management plugin key rotation in replication

2021-08-30 Thread Sergei Golubchik
Hi, Reinis! On Aug 30, Reinis Rozitis wrote: > > Slaves use their own encryption, they can use completely different set of > > keys with different rotation period. They don't have to be synchronized with > >the master. > > That is clear, > but I wanted to know in case they use the same key does

Re: [Maria-discuss] AWS Key management plugin key rotation in replication

2021-08-30 Thread Reinis Rozitis
> Slaves use their own encryption, they can use completely different set of keys with different rotation period. They don't have to be synchronized with the master. That is clear, but I wanted to know in case they use the same key does the KMS API / Plugin somehow pick up the rotation event and

Re: [Maria-discuss] AWS Key management plugin key rotation in replication

2021-08-30 Thread Sergei Golubchik
Hi, Reinis! Slaves use their own encryption, they can use completely different set of keys with different rotation period. They don't have to be synchronized with the master. On Aug 29, Reinis Rozitis wrote: > Hello, > I wanted to clarify - does the key rotation (with AWS KMS backend) work in >

[Maria-discuss] AWS Key management plugin key rotation in replication

2021-08-29 Thread Reinis Rozitis
Hello, I wanted to clarify - does the key rotation (with AWS KMS backend) work in replication scenario? As in do the slaves (somehow) get also notified and perform the re-encryption if the key is rotated (on master) in background or you have to use different key for each slave for rotation to

Re: [Maria-discuss] aws key management plugin

2018-10-18 Thread James Colannino
Now it all makes sense. There's one mystery solved :) Thank you for your work on that! On Thu, Oct 18, 2018, 5:30 PM Sergei Golubchik wrote: > > Yes. It's a bug, should be fixed in the next release. > Reported as https://jira.mariadb.org/browse/MDEV-17496 > >

Re: [Maria-discuss] aws key management plugin

2018-10-18 Thread Paul Chubb
Cool, thanks! Sergei just wanted to be sure that there wasn't another issue I wasn't aware of. I will proceed to compile from source in the hope that by the time I go production, the version baked by you guys is available. Many thanks for all your hard work. Cheers Paul On Fri, Oct 19, 2018 at

Re: [Maria-discuss] aws key management plugin

2018-10-18 Thread Sergei Golubchik
Hi, Paul! On Oct 19, Paul Chubb wrote: > Hi, > on the repo there only seems to be copies of this for Ubuntu yacketty > (16.10) and Ubuntu zesty (17.04). Both of these are end of life. Is there > supposed to be support for Bionic (18.04)? Yes. It's a bug, should be fixed in the next

Re: [Maria-discuss] aws key management plugin

2018-10-18 Thread James Colannino
I found that the package for this plugin exists (or at least did when I installed it a couple months ago) on 18.04 if you setup the repo for MariaDB 10.2, but that it doesn't exist in the repo for 10.3. I did a bunch of digging and couldn't find out why, and when I sent an email to the list about

[Maria-discuss] aws key management plugin

2018-10-18 Thread Paul Chubb
Hi, on the repo there only seems to be copies of this for Ubuntu yacketty (16.10) and Ubuntu zesty (17.04). Both of these are end of life. Is there supposed to be support for Bionic (18.04)? Secondly, they are tagged with the mariadb version number. Are they supposed to work across versions

Re: [Maria-discuss] AWS Key Management plugin

2017-05-09 Thread Daniel Black
On 10/05/17 05:59, Christopher Hendry wrote: > Currently configuring MariaDB for at rest encryption using Amazon key > management. > > A few weeks ago, I setup our primary server with no problems (Centos > 7). Recently, working on the same hardware/OS for slaves - when I do a > yum install

[Maria-discuss] AWS Key Management plugin

2017-05-09 Thread Christopher Hendry
Currently configuring MariaDB for at rest encryption using Amazon key management. A few weeks ago, I setup our primary server with no problems (Centos 7). Recently, working on the same hardware/OS for slaves - when I do a yum install MariaDB-aws-key-management I get: "No package