@@ -22,15 +22,18 @@ sudo sed -i -E "s|^\s*shared_preload_libraries\s*=\s*'[^']*'|shared_preload_libr
2222sudo systemctl restart postgresql-17
2323
2424# Test pg_tde
25+ rm -rf /tmp/keyring.per
2526sudo -u postgres psql << EOF
2627SELECT version();
2728CREATE EXTENSION pg_tde;
2829SELECT pg_tde_add_global_key_provider_file('global_file_provider','/tmp/keyring.per');
2930SELECT pg_tde_add_database_key_provider_file('local_file_provider','/tmp/keyring.per');
31+
3032SELECT pg_tde_create_key_using_global_key_provider('global_database_key', 'global_file_provider');
3133SELECT pg_tde_create_key_using_global_key_provider('server_key', 'global_file_provider');
3234SELECT pg_tde_create_key_using_global_key_provider('default_key', 'global_file_provider');
3335SELECT pg_tde_create_key_using_database_key_provider('database_key', 'local_file_provider');
36+
3437SELECT pg_tde_set_key_using_database_key_provider('database_key', 'local_file_provider');
3538SELECT pg_tde_set_key_using_global_key_provider('global_database_key', 'global_file_provider');
3639SELECT pg_tde_set_server_key_using_global_key_provider('server_key', 'global_file_provider');
@@ -39,7 +42,7 @@ SELECT pg_tde_set_default_key_using_global_key_provider('default_key', 'global_f
3942CREATE TABLE t1(id INT, data TEXT) USING tde_heap;
4043INSERT INTO t1 VALUES (1, 'secret');
4144SELECT * FROM t1;
42- ALTER SYSTEM SET pg_tde.wal_encrypt = 'ON'
45+ ALTER SYSTEM SET pg_tde.wal_encrypt = 'ON';
4346EOF
4447
4548# Enable WAL encryption
@@ -53,9 +56,23 @@ SELECT pg_tde_key_info();
5356SELECT pg_tde_server_key_info();
5457SELECT pg_tde_default_key_info();
5558SELECT * FROM t1;
59+
5660SELECT pg_tde_is_encrypted('t1');
5761SHOW pg_tde.wal_encrypt;
58- DROP EXTENSION pg_tde CASCADE;
62+
63+ SELECT pg_tde_delete_key();
64+ DROP TABLE t1;
65+ SELECT pg_tde_delete_default_key();
66+
67+ ALTER SYSTEM SET pg_tde.wal_encrypt = 'OFF';
68+ EOF
69+
70+ # Disable WAL encryption
71+ sudo systemctl restart postgresql-17
72+
73+ sudo -u postgres psql << EOF
74+ SHOW pg_tde.wal_encrypt;
75+ DROP EXTENSION pg_tde;
5976EOF
6077
6178# Stop server
0 commit comments