@@ -106,15 +106,43 @@ The KMIP provider uses a remote KMIP server.
106
106
Use these functions to add a KMIP provider:
107
107
108
108
``` sql
109
- SELECT pg_tde_add_database_key_provider_kmip(' provider-name' ,' kmip-addr' , ` port` , ' /path_to/server_certificate.pem' , ' /path_to/client_cert.pem' , ' /path_to/client_key.pem' );
110
- SELECT pg_tde_add_global_key_provider_kmip(' provider-name' ,' kmip-addr' , ` port` , ' /path_to/server_certificate.pem' , ' /path_to/client_cert.pem' , ' /path_to/client_key.pem' );
109
+ SELECT pg_tde_add_database_key_provider_kmip(
110
+ ' provider-name' ,
111
+ ' kmip-addr' ,
112
+ ` port` ,
113
+ ' /path_to/server_certificate.pem' ,
114
+ ' /path_to/client_cert.pem' ,
115
+ ' /path_to/client_key.pem'
116
+ );
117
+ SELECT pg_tde_add_global_key_provider_kmip(
118
+ ' provider-name' ,
119
+ ' kmip-addr' ,
120
+ ` port` ,
121
+ ' /path_to/server_certificate.pem' ,
122
+ ' /path_to/client_certificate.pem' ,
123
+ ' /path_to/client_key.pem'
124
+ );
111
125
```
112
126
113
127
These functions change the KMIP provider:
114
128
115
129
``` sql
116
- SELECT pg_tde_change_database_key_provider_kmip(' provider-name' ,' kmip-addr' , ` port` , ' /path_to/server_certificate.pem' , ' /path_to/client_cert.pem' , ' /path_to/client_key.pem' );
117
- SELECT pg_tde_change_global_key_provider_kmip(' provider-name' ,' kmip-addr' , ` port` , ' /path_to/server_certificate.pem' , ' /path_to/client_cert.pem' , ' /path_to/client_key.pem' );
130
+ SELECT pg_tde_change_database_key_provider_kmip(
131
+ ' provider-name' ,
132
+ ' kmip-addr' ,
133
+ ` port` ,
134
+ ' /path_to/server_certificate.pem' ,
135
+ ' /path_to/client_cert.pem' ,
136
+ ' /path_to/client_key.pem'
137
+ );
138
+ SELECT pg_tde_change_global_key_provider_kmip(
139
+ ' provider-name' ,
140
+ ' kmip-addr' ,
141
+ ` port` ,
142
+ ' /path_to/server_certificate.pem' ,
143
+ ' /path_to/client_certificate.pem' ,
144
+ ' /path_to/client_key.pem'
145
+ );
118
146
```
119
147
120
148
where:
@@ -124,7 +152,7 @@ where:
124
152
* ` port ` is the port to communicate with the KMIP server.
125
153
Most KMIP servers use port 5696.
126
154
* ` server-certificate ` is the path to the certificate file for the KMIP server.
127
- * ` client-cert ` is the path to the client certificate.
155
+ * ` client-certificate ` is the path to the client certificate.
128
156
* ` client-key ` is the path to the client key.
129
157
130
158
The specified access parameters require permission to read and write keys at the server.
0 commit comments