database/openGauss-server
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

!2512 未开启TDE功能的情况下，执行alter table ENCRYPTION KEY ROTATION，数据库断开链接

Browse Source 
Merge pull request !2512 from xuyuanhui/tde_branch
This commit is contained in:
opengauss-bot
2022-12-01 02:37:08 +00:00
committed by Gitee
parent aca1831e9d e4be9c0903
commit f4f3dd08ac
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/gausskernel/security/tde_key_management/tde_key_manager.cpp
View File

@ -126,10 +126,15 @@ const TDEData* TDEKeyManager::get_dek(const char* cmk_id, const char* dek_cipher
char* TDEKeyManager::get_cmk_id()
{
if (u_sess->attr.attr_security.tde_cmk_id == NULL || strlen(u_sess->attr.attr_security.tde_cmk_id) == 0) {
if (!g_instance.attr.attr_security.enable_tde) {
ereport(ERROR, (errcode(ERRCODE_UNEXPECTED_NULL_VALUE),
errmsg("get cmk id failed for Transparent Data Encryption"),
errdetail("guc parameter enable_tde must be set for using TDE feature")));
}
if (u_sess->attr.attr_security.tde_cmk_id == NULL || strlen(u_sess->attr.attr_security.tde_cmk_id) != 36) {
ereport(ERROR, (errcode(ERRCODE_UNEXPECTED_NULL_VALUE),
errmsg("get cmk id failed for Transparent Data Encryption"),
errdetail("guc parameter tde_cmk_id must be set correctly to use TDE feature")));
errdetail("guc parameter tde_cmk_id must be set correctly by KMS to use TDE feature")));
}
return u_sess->attr.attr_security.tde_cmk_id;
}