8.6.1 MySQL 企业加密 Installation and Upgrading
The functions are provided by a MySQL component component_enterprise_encryption
, and installing the component installs all of the functions.
MySQL Enterprise Encryption functions are provided by the MySQL component_enterprise_encryption
component. For upgrade information, see Upgrading MySQL Enterprise Encryption.
If you are upgrading from a release prior to MySQL 8.0.30: Before installing the component, unload any legacy functions using the DROP FUNCTION
statement:
DROP FUNCTION asymmetric_decrypt;
DROP FUNCTION asymmetric_derive;
DROP FUNCTION asymmetric_encrypt;
DROP FUNCTION asymmetric_sign;
DROP FUNCTION asymmetric_verify;
DROP FUNCTION create_asymmetric_priv_key;
DROP FUNCTION create_asymmetric_pub_key;
DROP FUNCTION create_dh_parameters;
DROP FUNCTION create_digest;
The function names must be specified in lowercase. The statements require the DROP
privilege for the mysql
database.
To install the component, issue this INSTALL COMPONENT
statement:
INSTALL COMPONENT "file://component_enterprise_encryption";
INSTALL COMPONENT
requires the INSERT
privilege for the mysql.component
system table because it adds a row to that table to register the component. To verify that the component has been installed, issue the statement shown here:
SELECT * FROM mysql.component;
Components listed in mysql.component
are loaded by the loader service during the startup sequence.
If you need to uninstall the component, issue an UNINSTALL COMPONENT
statement:
UNINSTALL COMPONENT "file://component_enterprise_encryption";
Uninstalling the component uninstalls all of the functions. For more details, see Section 7.5.1, “Installing and Uninstalling Components”.
Installing the component installs all of its functions, so you do not need to create them using CREATE FUNCTION
statements as in older releases of MySQL.
When you have installed the component, if you want the component functions to support decryption and verification for content produced by legacy functions, set the enterprise_encryption.rsa_support_legacy_padding
system variable to ON
. Also, if you want to change the maximum length allowed for the RSA keys generated by the component functions, use the enterprise_encryption.maximum_rsa_key_size
system variable to set an appropriate maximum. For configuration information, see Section 8.6.2, “Configuring MySQL Enterprise Encryption”.