ChapterA 12.A Database Encryption
A

In a??Tested Reference Implementations a??, Drop RHEL 6 and update other distros

In a??Special note - GNU Privacy Guard and Agentsa??, Advise kill and restart of any existing GPG agent processes so that updates are recognized.

In a??Using the reference implementation's custom pinentry programa??, Correct typo. Should be GPG 2.2.4 not GPG 2.2.24

In a??Device IO a??, Add reference to the Programmer's Guide for data in motion

In a??Encrypted Database Creation a??, remove redundant information. Add a summary for encrypting the database.

In a??Key Ring on Disk a??, rewrite the section with corrections and improvements.

In a??Master Key Configuration File and Encryption Keys a??, remove redundant information

In a??Changing the Encryption Keys a??, remove redundant information and add a link to REORG -ENCRYPT.

In a??Packaging a??, remove the reference to BLOWFISH algorithm.

In a??Installation a??, remove the reference to libgtmcrypt_openssl_BLOWFISHCFB.so

In a??Keys in the Process Address Space / Environmenta??, add a point about the importance of password management procedure and a note on using the GT.M restriction facility.

In a??Long Lived Keys a??, wording revision on key changes to better reflect the reality

In a??Using the reference implementation's custom pinentry programa??, add an introduction paragraph, corrections, and a reference to the manpages of gpg and gpg-agent.

In a??Plugin Architecture & Interface a??, fix a typo (change "provided compiled" to "provided")

In a??Special note - GNU Privacy Guard and Agentsa??, GPG agent bug affecting 2.1.15 through 2.2.23

In a??Using the reference implementation's custom pinentry programa??, GPG agent bug affecting 2.1.15 through 2.2.23

In a??Key Ring on Disk a??, gtm_dbkeys to gtmcrypt_config

In a??Master Key Configuration File and Encryption Keys a??, gtm_dbkeys to gtmcrypt_config

In a??Plugin Architecture & Interface a??, specified that reference implementation is not shipped in binary form

In a??GT.CM a??, specified that replication can be encrypted

In a??Tested Reference Implementations a??, specified that the reference impl is source only; remove Solaris and HP-UX. Changed the supported versions table to drop 12.04 and SLES. Also added newer Linux versions that we test with and cleanup up the blowfish discussion

In a??Using the Reference Implementation with Older Releases a??, corrected typos and tweaked wording

In a??Packaging a??, specified that reference implementation is not shipped in binary form

In a??Warning a??, specified that the reference implementation is source only.

In a??Overview a??, gtm_dbkeys to gtmcrypt_config

In a??Overview a??, specified that the reference impl is source only.

In a??FIPS Modea??, fixed a typo and added a link to http://www.openssl.org/docs/fips; remove HP-UX and Solaris

In a??Installation a??, specified that the reference implementation is source only.

In a??Special note - GNU Privacy Guard and Agentsa??, Updated for changes in the FIS recommendations for how GT.M works with a GPG agent.

In a??Using the reference implementation's custom pinentry programa??, use-standard-socket doc add-on