PBS-39 feature: Add binlog encryption config and keyring support (part 6)

CMakeLists.txt

@@ -184,7 +184,7 @@ add_library(lib_opensslpp STATIC ${opensslpp_source_files})
 target_link_libraries(lib_opensslpp
   PRIVATE
     binlog_server_compiler_flags
-    OpenSSL::Crypto
+    Boost::headers OpenSSL::Crypto
 )
 # it is not possible to propagate CXX_EXTENSIONS and CXX_STANDARD_REQUIRED
 # via interface library (binlog_server_compiler_flags)
@@ -594,6 +594,7 @@ target_link_libraries(binlog_server
     binsrv::lib_gtids
     binsrv::lib_events
     binsrv::lib_models
+    binsrv::lib_opensslpp
     Boost::headers Boost::json Boost::url
     aws-cpp-sdk-s3-crt
 )

src/binsrv/encryption_config.cpp

@@ -28,6 +28,8 @@ void encryption_config::validate() const {
     util::exception_location().raise<std::invalid_argument>(
         "error validating storage encryption config: unsupported format");
   }
+  // TODO: make sure that data encryption cipher is supported by OpenSSL
+  //       and has CTR mode
 }
 
 } // namespace binsrv

src/binsrv/keyring_record_collection.cpp

@@ -62,6 +62,14 @@ void keyring_record_collection::validate() const {
     util::exception_location().raise<std::invalid_argument>(
         "unsupported keyring record collection version");
   }
+  // TODO: make sure that all the keys have unique IDs
+
+  // TODO: make sure that all keys have ciphers known in OpenSSL
+  //       (currently only ECB, CBC, CTR, GCM modes are supported by
+  //       opensslpp::cipher_context)
+
+  // TODO: make sure that all keys have data_hex values of the correct length
+  //       that matches with the cipher
 }
 
 [[nodiscard]] std::string keyring_record_collection::get_description() const {