MySQL 8.0.39
Source Code Documentation
component_keyring_mysql_server

MySQL server component provides a wrapper implementation of all component services related to keyring.

Following is the list of services:

  • keyring_aes
  • keyring_generate
  • keyring_keys_metadata_iterator
  • keyring_component_status
  • keyring_metadata_query
  • keyring_reader
  • keyring_load
  • keyring_writer

The implementation of above services in turn calls actual keyring component implementation (such as component_keyring_file). However, this component provides concurrency control for read/write operations affecting keyring.

In addition, this implementation also checks if KEYRING_OPERATIONS system variable permits given operation or not.

This implementation is set as default implementation for MySQL server.

Handles for underlying keyring component service implementations are obtained at two locations:

  1. After processing server's manifest file
  2. After installing proxy keyring component for keyring plugin

Once handles are set, they are not set again.

Thus, if a keyring component is installed through manifest file, keyring plugin will not considered even if it is installed through –early-plugin-load.

These handles ares freed at the time of server shutdown.