-
Notifications
You must be signed in to change notification settings - Fork 19
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
PG-1072: Fix major event trigger issues
* Create table always checked the principal key and tried to create it, event when we didn't try to create a tde_heap table * Alter table wasn't handled, and because of this changing a table to tde_heap access method didn't result in an encrypted table. * defaut_table_access_method wasn't handled, and because of this, creating a table using that also resulted in a non encrypted table.
- Loading branch information
Showing
4 changed files
with
267 additions
and
19 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,159 @@ | ||
| #!/usr/bin/perl | ||
|
|
||
| use strict; | ||
| use warnings; | ||
| use File::Basename; | ||
| use File::Compare; | ||
| use File::Copy; | ||
| use Test::More; | ||
| use lib 't'; | ||
| use pgtde; | ||
|
|
||
| # Get file name and CREATE out file name and dirs WHERE requried | ||
| PGTDE::setup_files_dir(basename($0)); | ||
|
|
||
| # CREATE new PostgreSQL node and do initdb | ||
| my $node = PGTDE->pgtde_init_pg(); | ||
| my $pgdata = $node->data_dir; | ||
|
|
||
| # UPDATE postgresql.conf to include/load pg_tde library | ||
| open my $conf, '>>', "$pgdata/postgresql.conf"; | ||
| print $conf "shared_preload_libraries = 'pg_tde'\n"; | ||
| close $conf; | ||
|
|
||
| # Start server | ||
| my $rt_value = $node->start; | ||
| ok($rt_value == 1, "Start Server"); | ||
|
|
||
| # CREATE EXTENSION and change out file permissions | ||
| my ($cmdret, $stdout, $stderr) = $node->psql('postgres', 'CREATE EXTENSION pg_tde;', extra_params => ['-a']); | ||
| ok($cmdret == 0, "CREATE PGTDE EXTENSION"); | ||
| PGTDE::append_to_file($stdout); | ||
|
|
||
|
|
||
| $rt_value = $node->psql('postgres', 'CREATE TABLE test_enc(id SERIAL,k INTEGER,PRIMARY KEY (id)) USING tde_heap;', extra_params => ['-a']); | ||
| ok($rt_value == 3, "Failing query"); | ||
|
|
||
|
|
||
| # Restart the server | ||
| PGTDE::append_to_file("-- server restart"); | ||
| $node->stop(); | ||
|
|
||
| $rt_value = $node->start(); | ||
| ok($rt_value == 1, "Restart Server"); | ||
|
|
||
| $rt_value = $node->psql('postgres', "SELECT pg_tde_add_key_provider_file('file-vault','/tmp/pg_tde_test_keyring.per');", extra_params => ['-a']); | ||
| $rt_value = $node->psql('postgres', "SELECT pg_tde_set_principal_key('test-db-principal-key','file-vault');", extra_params => ['-a']); | ||
|
|
||
| $stdout = $node->safe_psql('postgres', 'CREATE TABLE test_enc(id SERIAL,k VARCHAR(32),PRIMARY KEY (id)) USING tde_heap;', extra_params => ['-a']); | ||
| PGTDE::append_to_file($stdout); | ||
|
|
||
| $stdout = $node->safe_psql('postgres', 'INSERT INTO test_enc (k) VALUES (\'foobar\'),(\'barfoo\');', extra_params => ['-a']); | ||
| PGTDE::append_to_file($stdout); | ||
|
|
||
| $stdout = $node->safe_psql('postgres', 'SELECT * FROM test_enc ORDER BY id ASC;', extra_params => ['-a']); | ||
| PGTDE::append_to_file($stdout); | ||
|
|
||
| $stdout = $node->safe_psql('postgres', 'CREATE TABLE test_enc2(id SERIAL,k VARCHAR(32),PRIMARY KEY (id));', extra_params => ['-a']); | ||
| PGTDE::append_to_file($stdout); | ||
|
|
||
| $stdout = $node->safe_psql('postgres', 'INSERT INTO test_enc2 (k) VALUES (\'foobar\'),(\'barfoo\');', extra_params => ['-a']); | ||
| PGTDE::append_to_file($stdout); | ||
|
|
||
| $stdout = $node->safe_psql('postgres', 'ALTER TABLE test_enc2 SET ACCESS METHOD tde_heap;', extra_params => ['-a']); | ||
| PGTDE::append_to_file($stdout); | ||
|
|
||
| $stdout = $node->safe_psql('postgres', 'SELECT * FROM test_enc2 ORDER BY id ASC;', extra_params => ['-a']); | ||
| PGTDE::append_to_file($stdout); | ||
|
|
||
| $stdout = $node->safe_psql('postgres', 'SET default_table_access_method = "tde_heap";', extra_params => ['-a']); | ||
| PGTDE::append_to_file($stdout); | ||
|
|
||
| $stdout = $node->safe_psql('postgres', 'SET default_table_access_method = "tde_heap"; CREATE TABLE test_enc3(id SERIAL,k VARCHAR(32),PRIMARY KEY (id));', extra_params => ['-a']); | ||
| PGTDE::append_to_file($stdout); | ||
|
|
||
| $stdout = $node->safe_psql('postgres', 'INSERT INTO test_enc3 (k) VALUES (\'foobar\'),(\'barfoo\');', extra_params => ['-a']); | ||
| PGTDE::append_to_file($stdout); | ||
|
|
||
| $stdout = $node->safe_psql('postgres', 'SELECT * FROM test_enc3 ORDER BY id ASC;', extra_params => ['-a']); | ||
| PGTDE::append_to_file($stdout); | ||
|
|
||
| # Restart the server | ||
| PGTDE::append_to_file("-- server restart"); | ||
| $rt_value = $node->stop(); | ||
| $rt_value = $node->start(); | ||
|
|
||
| $stdout = $node->safe_psql('postgres', 'SELECT * FROM test_enc ORDER BY id ASC;', extra_params => ['-a']); | ||
| PGTDE::append_to_file($stdout); | ||
|
|
||
| # Verify that we can't see the data in the file | ||
| my $tablefile = $node->safe_psql('postgres', 'SHOW data_directory;'); | ||
| $tablefile .= '/'; | ||
| $tablefile .= $node->safe_psql('postgres', 'SELECT pg_relation_filepath(\'test_enc\');'); | ||
|
|
||
| my $strings = 'TABLEFILE FOUND: '; | ||
| $strings .= `(ls $tablefile >/dev/null && echo yes) || echo no`; | ||
| PGTDE::append_to_file($strings); | ||
|
|
||
| $strings = 'CONTAINS FOO (should be empty): '; | ||
| $strings .= `strings $tablefile | grep foo`; | ||
| PGTDE::append_to_file($strings); | ||
|
|
||
|
|
||
|
|
||
|
|
||
| # Verify that we can't see the data in the file | ||
| my $tablefile2 = $node->safe_psql('postgres', 'SHOW data_directory;'); | ||
| $tablefile2 .= '/'; | ||
| $tablefile2 .= $node->safe_psql('postgres', 'SELECT pg_relation_filepath(\'test_enc2\');'); | ||
|
|
||
| $strings = 'TABLEFILE2 FOUND: '; | ||
| $strings .= `(ls $tablefile2 >/dev/null && echo yes) || echo no`; | ||
| PGTDE::append_to_file($strings); | ||
|
|
||
| $strings = 'CONTAINS FOO (should be empty): '; | ||
| $strings .= `strings $tablefile2 | grep foo`; | ||
| PGTDE::append_to_file($strings); | ||
|
|
||
|
|
||
|
|
||
|
|
||
| # Verify that we can't see the data in the file | ||
| my $tablefile3 = $node->safe_psql('postgres', 'SHOW data_directory;'); | ||
| $tablefile3 .= '/'; | ||
| $tablefile3 .= $node->safe_psql('postgres', 'SELECT pg_relation_filepath(\'test_enc3\');'); | ||
|
|
||
| $strings = 'TABLEFILE3 FOUND: '; | ||
| $strings .= `(ls $tablefile3 >/dev/null && echo yes) || echo no`; | ||
| PGTDE::append_to_file($strings); | ||
|
|
||
| $strings = 'CONTAINS FOO (should be empty): '; | ||
| $strings .= `strings $tablefile3 | grep foo`; | ||
| PGTDE::append_to_file($strings); | ||
|
|
||
|
|
||
|
|
||
| $stdout = $node->safe_psql('postgres', 'DROP TABLE test_enc;', extra_params => ['-a']); | ||
| PGTDE::append_to_file($stdout); | ||
|
|
||
| $stdout = $node->safe_psql('postgres', 'DROP TABLE test_enc2;', extra_params => ['-a']); | ||
| PGTDE::append_to_file($stdout); | ||
|
|
||
| $stdout = $node->safe_psql('postgres', 'DROP TABLE test_enc3;', extra_params => ['-a']); | ||
| PGTDE::append_to_file($stdout); | ||
|
|
||
| # DROP EXTENSION | ||
| $stdout = $node->safe_psql('postgres', 'DROP EXTENSION pg_tde;', extra_params => ['-a']); | ||
| ok($cmdret == 0, "DROP PGTDE EXTENSION"); | ||
| PGTDE::append_to_file($stdout); | ||
| # Stop the server | ||
| $node->stop(); | ||
|
|
||
| # compare the expected and out file | ||
| my $compare = PGTDE->compare_results(); | ||
|
|
||
| # Test/check if expected and result/out file match. If Yes, test passes. | ||
| is($compare,0,"Compare Files: $PGTDE::expected_filename_with_path and $PGTDE::out_filename_with_path files."); | ||
|
|
||
| # Done testing for this testcase file. | ||
| done_testing(); |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,36 @@ | ||
| CREATE EXTENSION pg_tde; | ||
| -- server restart | ||
| CREATE TABLE test_enc(id SERIAL,k VARCHAR(32),PRIMARY KEY (id)) USING tde_heap; | ||
| INSERT INTO test_enc (k) VALUES ('foobar'),('barfoo'); | ||
| SELECT * FROM test_enc ORDER BY id ASC; | ||
| 1|foobar | ||
| 2|barfoo | ||
| CREATE TABLE test_enc2(id SERIAL,k VARCHAR(32),PRIMARY KEY (id)); | ||
| INSERT INTO test_enc2 (k) VALUES ('foobar'),('barfoo'); | ||
| ALTER TABLE test_enc2 SET ACCESS METHOD tde_heap; | ||
| SELECT * FROM test_enc2 ORDER BY id ASC; | ||
| 1|foobar | ||
| 2|barfoo | ||
| SET default_table_access_method = "tde_heap"; | ||
| SET default_table_access_method = "tde_heap"; CREATE TABLE test_enc3(id SERIAL,k VARCHAR(32),PRIMARY KEY (id)); | ||
| INSERT INTO test_enc3 (k) VALUES ('foobar'),('barfoo'); | ||
| SELECT * FROM test_enc3 ORDER BY id ASC; | ||
| 1|foobar | ||
| 2|barfoo | ||
| -- server restart | ||
| SELECT * FROM test_enc ORDER BY id ASC; | ||
| 1|foobar | ||
| 2|barfoo | ||
| TABLEFILE FOUND: yes | ||
|
|
||
| CONTAINS FOO (should be empty): | ||
| TABLEFILE2 FOUND: yes | ||
|
|
||
| CONTAINS FOO (should be empty): | ||
| TABLEFILE3 FOUND: yes | ||
|
|
||
| CONTAINS FOO (should be empty): | ||
| DROP TABLE test_enc; | ||
| DROP TABLE test_enc2; | ||
| DROP TABLE test_enc3; | ||
| DROP EXTENSION pg_tde; |