Edit: /usr/include/mysql/mysql/plugin_keyring.h (6694B)
/* Copyright (c) 2016, 2023, Oracle and/or its affiliates.
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License, version 2.0,
as published by the Free Software Foundation.
This program is also distributed with certain software (including
but not limited to OpenSSL) that is licensed under separate terms,
as designated in a particular file or component or in included license
documentation. The authors of MySQL hereby grant you an additional
permission to link the program and your derivative works with the
separately licensed software that they have included with MySQL.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License, version 2.0, for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA */
#ifndef MYSQL_PLUGIN_KEYRING_INCLUDED
#define MYSQL_PLUGIN_KEYRING_INCLUDED
/**
API for keyring plugin. (MYSQL_KEYRING_PLUGIN)
*/
#include "plugin.h"
#define MYSQL_KEYRING_INTERFACE_VERSION 0x0101
/**
The descriptor structure for the plugin, that is referred from
st_mysql_plugin.
*/
struct st_mysql_keyring
{
int interface_version;
/*!
Add key to the keyring.
Obfuscates and adds the key to the keyring. The key is associated with
key_id and user_id (unique key identifier).
@param[in] key_id id of the key to store
@param[in] key_type type of the key to store
@param[in] user_id id of the owner of the key
@param[in] key the key itself to be stored. The memory of the key is
copied by the keyring, thus the key itself can be freed
after it was stored in the keyring.
@param[in] key_len the length of the key to be stored
@return Operation status
@retval 0 OK
@retval 1 ERROR
*/
my_bool (*mysql_key_store)(const char *key_id, const char *key_type,
const char* user_id, const void *key, size_t key_len);
/*!
Fetches key from the keyring.
De-obfuscates and retrieves key associated with key_id and user_id from the
keyring.
@param[in] key_id id of the key to fetch
@param[out] key_type type of the fetched key
@param[in] user_id id of the owner of the key
@param[out] key the fetched key itself. The memory for this key is
allocated by the keyring and needs to be freed by the
user when no longer needed. Prior to freeing the memory
it needs to be obfuscated or zeroed.
@param[out] key_len the length of the fetched key
@return Operation status
@retval 0 OK
@retval 1 ERROR
*/
my_bool (*mysql_key_fetch)(const char *key_id, char **key_type,
const char *user_id, void **key, size_t *key_len);
/*!
Removes key from the keyring.
Removes the key associated with key_id and user_id from the
keyring.
@param[in] key_id id of the key to remove
@param[in] user_id id of the owner of the key to remove
@return Operation status
@retval 0 OK
@retval 1 ERROR
*/
my_bool (*mysql_key_remove)(const char *key_id, const char *user_id);
/*!
Generates and stores the key.
Generates a random key of length key_len, associates it with key_id, user_id
and stores it in the keyring.
@param[in] key_id id of the key to generate
@param[in] key_type type of the key to generate
@param[in] user_id id of the owner of the generated key
@param[in] key_len length of the key to generate
@return Operation status
@retval 0 OK
@retval 1 ERROR
*/
my_bool (*mysql_key_generate)(const char *key_id, const char *key_type,
const char *user_id, size_t key_len);
/**
Keys_iterator object refers to an iterator which is used to iterate
on a list which refers to Key_metadata. Key_metadata hold information
about individual keys keyd_id and user_id. Keys_iterator should be used
in following sequence only.
void* iterator_ptr;
char key_id[64]= { 0 };
char user_id[64]= { 0 };
plugin_handle->mysql_key_iterator_init(&iterator_ptr);
if (iterator_ptr == NULL)
report error;
while (!(plugin_handle->mysql_key_iterator_get_key(iterator_ptr,
key_id, user_id)))
{
Fetch the keys.
Perform operations on the fetched keys.
..
}
plugin_handle->mysql_key_iterator_deinit(iterator_ptr);
init() method accepts a void pointer which is the made to point to
Keys_iterator instance. Keys_iterator instance internal pointer points
to Key_metadata list. This list holds information about all keys stored
in the backed end data store of keyring plugin. After call to init()
please check iterator_ptr.
get_key() method accepts the above iterator_ptr as IN param and then
fills the passes in key_id and user_id with valid values. This can be
used to fetch actual key information. Every call to this method will
change internal pointers to advance to next position, so that the next
call will fetch the next key.
deinit() method frees all internal pointers along with iterator_ptr.
*/
/**
Initialize an iterator.
@param[out] key_iterator Iterator used to fetch individual keys
from key_container.
@return VOID
*/
void (*mysql_key_iterator_init)(void** key_iterator);
/**
Deinitialize an iterator.
@param[in] key_iterator Iterator used to fetch individual keys
from key_container.
@return VOID
*/
void (*mysql_key_iterator_deinit)(void* key_iterator);
/**
Get details of key. Every call to this service will change
internal pointers to advance to next position, so that the next call
will fetch the next key. In case iterator moves to the end, this service
will return error.
@param[in] key_iterator Iterator used to fetch individual keys
from key_container.
@param[out] key_id id of the key
@param[out] user_id id of the owner
@return Operation status
@retval 0 OK
@retval 1 ERROR
*/
bool (*mysql_key_iterator_get_key)(void* key_iterator, char *key_id, char *user_id);
};
#endif