723518c390
Bulk transfer of EAR functionality. Includes all providers etc. Could maybe break up into smaller blocks, but once it gets down to the core of it, would require messing with code instead of just moving. So this is it. Note: KMIP support is disabled unless you happen to have the kmipc SDK in your scylla dir. Adds optional encryption of sstables and commitlog, using block level file encryption. Provides key sourcing from various sources, such as local files or popular KMS systems.
34 lines
801 B
C++
34 lines
801 B
C++
/*
|
|
* Copyright (C) 2018 ScyllaDB
|
|
*
|
|
*/
|
|
|
|
/*
|
|
* SPDX-License-Identifier: LicenseRef-ScyllaDB-Source-Available-1.0
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include "../../utils/config_file.hh"
|
|
|
|
namespace encryption {
|
|
|
|
class encryption_config : public utils::config_file {
|
|
public:
|
|
encryption_config();
|
|
|
|
typedef std::unordered_map<sstring, string_map> string_string_map;
|
|
|
|
named_value<sstring> system_key_directory;
|
|
named_value<bool> config_encryption_active;
|
|
named_value<sstring> config_encryption_key_name;
|
|
named_value<string_map> system_info_encryption;
|
|
named_value<string_string_map> kmip_hosts;
|
|
named_value<string_string_map> kms_hosts;
|
|
named_value<string_string_map> gcp_hosts;
|
|
named_value<string_map> user_info_encryption;
|
|
named_value<bool> allow_per_table_encryption;
|
|
};
|
|
|
|
}
|