创建和使用加密表需要确保认证状态为打开

1. 查看gbase_encrypt_new_mode为AES128，1代表AES128

show variables like '%gbase_encrypt_new_mode%';
+------------------------+-------+
| Variable_name          | Value |
+------------------------+-------+
| gbase_encrypt_new_mode | 1     |
+------------------------+-------+

2. 创建加密表
gbase> create table t_encrypt(id int)encrypt;
Query OK, 0 rows affected (Elapsed: 00:00:00.97)

--未打开证书报以下错误
gbase> insert into t_encrypt values(1),(2);
ERROR 1705 (HY000): gcluster DML error: Commit failed, no successful node of some suffix
cause: (GBA-01EX-700) Gbase general error: Encrypt key invalid.
(GBA-01EX-700) Gbase general error: Encrypt key invalid.

3. 查看证书状态
SELECT * FROM INFORMATION_SCHEMA.ENCRYPTION_CERTIFICATE_STATUS;
+------+-----------+----------+-------------+
| HOST | IS_CREATE | KEY_TYPE | OPEN_STATUS |
+------+-----------+----------+-------------+
| ::   | YES       |        1 | OFF         |
+------+-----------+----------+-------------+
1 row in set (Elapsed: 00:00:00.00)

--打开证书后正常使用
gbase> alter encryption certificate open identified by 'password';
Query OK, 0 rows affected (Elapsed: 00:00:00.00)

gbase> insert into t_encrypt values(1),(2);
Query OK, 2 rows affected (Elapsed: 00:00:00.21)
Records: 2  Duplicates: 0  Warnings: 0