mysql通过udf生成keyring导致sqlexception

rhfm7lfc  于 2021-06-20  发布在  Mysql
关注(0)|答案(1)|浏览(456)

这是我在dba stackexchange中提出的一个问题。我将在这里逐字张贴：
我正在尝试使用mysql建议的keyring插件加密我的表。在my/etc/my.cnf文件中，我设置了早期插件标志以及密钥环文件的位置。它看起来像这样：

  1. [mysqld]
  2. early-plugin-load=keyring_file.so
  3. keyring_file_data=/usr/local/mysql/mysql-keyring/keyring

作为root用户，我还安装了keyring\u udf.so并创建了一些自定义项，如下所示：

  1. INSTALL PLUGIN keyring_udf SONAME 'keyring_udf.so';
  2. CREATE FUNCTION keyring_key_generate RETURNS INTEGER SONAME 'keyring_udf.so';
  3. CREATE FUNCTION keyring_key_fetch RETURNS STRING SONAME 'keyring_udf.so';
  4. CREATE FUNCTION keyring_key_length_fetch RETURNS INTEGER SONAME 'keyring_udf.so';
  5. CREATE FUNCTION keyring_key_type_fetch RETURNS STRING SONAME 'keyring_udf.so';
  6. CREATE FUNCTION keyring_key_store RETURNS INTEGER SONAME 'keyring_udf.so';
  7. CREATE FUNCTION keyring_key_remove RETURNS INTEGER SONAME 'keyring_udf.so';

从这里开始，我试图定义一个这样的键：

  1. SELECT keyring_key_generate('MyKey', 'AES', 32);

这将导致控制台发出以下消息：

  1. [2018-06-15 15:11:38] Streaming result set com.mysql.jdbc.RowDataDynamic@15d7e44 is still active. No statements may be issued when any streaming result sets are open and in use on a given connection. Ensure that you have called .close() on any active streaming result sets before attempting more queries.
  2. [2018-06-15 15:11:38] java.sql.SQLException: Streaming result set com.mysql.jdbc.RowDataDynamic@15d7e44 is still active. No statements may be issued when any streaming result sets are open and in use on a given connection. Ensure that you have called .close() on any active streaming result sets before attempting more queries.
  3.     at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:868)
  4.     at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:864)
  5.     at com.mysql.jdbc.MysqlIO.checkForOutstandingStreamingData(MysqlIO.java:3211)
  6.     at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:2443)
  7.     at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2677)
  8.     at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2545)
  9.     at com.mysql.jdbc.ConnectionImpl.setSessionMaxRows(ConnectionImpl.java:5432)
  10.     at com.mysql.jdbc.StatementImpl.executeQuery(StatementImpl.java:1365)
  11.     at com.mysql.jdbc.SQLError.convertShowWarningsToSQLWarnings(SQLError.java:704)
  12.     at com.mysql.jdbc.SQLError.convertShowWarningsToSQLWarnings(SQLError.java:656)
  13.     at com.mysql.jdbc.StatementImpl.getWarnings(StatementImpl.java:2145)
  14.     at com.intellij.database.remote.jdbc.impl.RemoteStatementImpl.getWarnings(RemoteStatementImpl.java:86)
  15.     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
  16.     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
  17.     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
  18.     at java.lang.reflect.Method.invoke(Method.java:498)
  19.     at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:324)
  20.     at sun.rmi.transport.Transport$1.run(Transport.java:200)
  21.     at sun.rmi.transport.Transport$1.run(Transport.java:197)
  22.     at java.security.AccessController.doPrivileged(Native Method)
  23.     at sun.rmi.transport.Transport.serviceCall(Transport.java:196)
  24.     at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:568)
  25.     at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:826)
  26.     at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:683)
  27.     at java.security.AccessController.doPrivileged(Native Method)
  28.     at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:682)
  29.     at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
  30.     at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
  31.     at java.lang.Thread.run(Thread.java:745)
  32.     at sun.rmi.transport.StreamRemoteCall.exceptionReceivedFromServer(StreamRemoteCall.java:276)
  33.     at sun.rmi.transport.StreamRemoteCall.executeCall(StreamRemoteCall.java:253)
  34.     at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:162)
  35.     at java.rmi.server.RemoteObjectInvocationHandler.invokeRemoteMethod(RemoteObjectInvocationHandler.java:227)
  36.     at java.rmi.server.RemoteObjectInvocationHandler.invoke(RemoteObjectInvocationHandler.java:179)
  37.     at com.sun.proxy.$Proxy121.getWarnings(Unknown Source)
  38.     at sun.reflect.GeneratedMethodAccessor360.invoke(Unknown Source)
  39.     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
  40.     at java.lang.reflect.Method.invoke(Method.java:498)
  41.     at com.intellij.execution.rmi.RemoteUtil.invokeRemote(RemoteUtil.java:169)
  42.     at com.intellij.execution.rmi.RemoteUtil.access$300(RemoteUtil.java:36)
  43.     at com.intellij.execution.rmi.RemoteUtil$RemoteInvocationHandler.invoke(RemoteUtil.java:274)
  44.     at com.sun.proxy.$Proxy122.getWarnings(Unknown Source)
  45.     at com.intellij.database.console.JdbcEngine.b(JdbcEngine.java:444)
  46.     at com.intellij.database.console.JdbcEngine.a(JdbcEngine.java:397)
  47.     at com.intellij.database.console.JdbcEngine.b(JdbcEngine.java:224)
  48.     at com.intellij.database.console.AbstractEngine.a(AbstractEngine.java:171)
  49.     at com.intellij.database.console.AbstractEngine.a(AbstractEngine.java:148)
  50.     at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
  51.     at java.util.concurrent.FutureTask.run(FutureTask.java:266)
  52.     at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
  53.     at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
  54.     at java.lang.Thread.run(Thread.java:745)
  56. [2018-06-15 15:11:38] [HY000][3188] Function 'keyring_key_generate' failed because underlying keyring service returned an error. Please check if a keyring plugin is installed and that provided arguments are valid for the keyring you are using.

我也尝试过重置mysql服务器： systemctl restart mysqld .
环境是centos服务器。
经过几个小时的努力，我决定举起白旗，向你们寻求帮助。感谢阅读/帮助！
编辑：
我试着在windows下执行同样的命令。keyring\u udf.dll文件仍然存在相同的问题。我想知道这是不是插件中的一个bug？或者是有一个关键的mysql设置我可能会错过。

mysqlDatabaseEncryptionplugins

1条答案

按热度按时间
enyaitl3

enyaitl31#

我也有同样的错误，而且在我的错误日志中还有如下内容：

  1. [ERROR] Plugin keyring_file reported: 'File '/usr/local/mysql/mysql-keyring/keyring' not found (Errcode: 13 - Permission denied)'

在我的例子中（我运行的是ubuntu），是apparmor限制了mysql的目录访问（不管目录或文件权限），因此mysql无法读取keyring目录或文件。
也许centos也在使用apparmor或者类似的东西。
mysql和ubuntu的apparmor配置文件已经允许访问 /var/lib/mysql-keyring/ . 所以你应该可以直接使用这个目录。我的工作配置：

  1. [mysqld]
  2. early-plugin-load=keyring_file.so
  3. keyring_file_data=/var/lib/mysql-keyring/keyring

否则，您可以在中的apparmor中更改或添加目录 /etc/apparmor.d/usr.sbin.mysqld .
希望这有帮助。

赞(0）分享  回复(0）举报  2021-06-20
我来回答

相关问题

    查看更多

    热门标签

    更多
    JavaquerypythonNode开发语言requestUtil数据库Table后端算法LoggerMessageElementParser

    最新问答

    更多
    • 蜀ICP备13028337号-1 大数据知识库 https://www.saoniuhuo.com © All rights reserved
    • 本站内容来源互联网,如果侵犯您的权益请联系我们删除, 联系方式：448109455@qq.com