• Julius Goryavsky's avatar
    MDEV-19281: Plugin implementation for the Hashicorp Vault KMS · 1146b713
    Julius Goryavsky authored
    - Authentication is done using the Hashicorp Vault's token
      authentication method;
    - If additional client authentication is required, then the
      path to the CA authentication bundle file may be passed
      as a plugin parameter;
    - The creation of the keys and their management is carried
      out using the Hashicorp Vault KMS and their tools;
    - Key values stored as hexadecimal strings;
    - Key values caching is supported.
    - Implemented a time-invalidated cache for key values and
      for key version numbers received from the Hashicorp Valult
      server;
    - The plugin uses libcurl (https) as an interface to
      the HashiCorp Vault server;
    - JSON parsing is performed through the JSON service
      (through the include/mysql/service_json.h);
    - HashiCorp Vault 1.2.4 was used for development and testing.
    1146b713
mariadb-plugin-hashicorp-key-management.install 103 Bytes