hcq/openGauss-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add get_cmk_id restrictions

Browse Source 
Signed-off-by: ericyuanhui <285521263@qq.com>
This commit is contained in:
ericyuanhui
2022-12-01 07:05:11 +08:00
committed by x00475975
parent aca1831e9d
commit e4be9c0903
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/gausskernel/security/tde_key_management/tde_key_manager.cpp
View File

@ -126,10 +126,15 @@ const TDEData* TDEKeyManager::get_dek(const char* cmk_id, const char* dek_cipher
char* TDEKeyManager::get_cmk_id()
{
if (u_sess->attr.attr_security.tde_cmk_id == NULL || strlen(u_sess->attr.attr_security.tde_cmk_id) == 0) {
if (!g_instance.attr.attr_security.enable_tde) {
ereport(ERROR, (errcode(ERRCODE_UNEXPECTED_NULL_VALUE),
errmsg("get cmk id failed for Transparent Data Encryption"),
errdetail("guc parameter tde_cmk_id must be set correctly to use TDE feature")));
errdetail("guc parameter enable_tde must be set for using TDE feature")));
}
if (u_sess->attr.attr_security.tde_cmk_id == NULL || strlen(u_sess->attr.attr_security.tde_cmk_id) != 36) {
ereport(ERROR, (errcode(ERRCODE_UNEXPECTED_NULL_VALUE),
errmsg("get cmk id failed for Transparent Data Encryption"),
errdetail("guc parameter tde_cmk_id must be set correctly by KMS to use TDE feature")));
}
return u_sess->attr.attr_security.tde_cmk_id;
}