\! gs_ktool -d all
DELETE ALL
\! gs_ktool -g
GENERATE
1
CREATE SCHEMA ce_drop_schema;
SET SEARCH_PATH TO ce_drop_schema;
CREATE CLIENT MASTER KEY cmk1 WITH ( KEY_STORE = gs_ktool , KEY_PATH = "gs_ktool/1" , ALGORITHM = AES_256_CBC);
CREATE COLUMN ENCRYPTION KEY cek1 WITH VALUES (CLIENT_MASTER_KEY = cmk1, ALGORITHM = AEAD_AES_256_CBC_HMAC_SHA256);
DROP SCHEMA ce_drop_schema CASCADE;
NOTICE: drop cascades to 2 other objects
DETAIL: drop cascades to client master key: cmk1
drop cascades to column encryption key: cek1
SHOW SEARCH_PATH;
search_path
----------------
ce_drop_schema
(1 row)
DROP CLIENT MASTER KEY cmk1 CASCADE;
ERROR: client master key "cmk1" does not exist
RESET search_path;
SHOW SEARCH_PATH;
search_path
----------------
"$user",public
(1 row)
CREATE CLIENT MASTER KEY cmk1 WITH ( KEY_STORE = gs_ktool , KEY_PATH = "gs_ktool/1" , ALGORITHM = AES_256_CBC);
DROP CLIENT MASTER KEY cmk1 CASCADE;
\! gs_ktool -d all
DELETE ALL
1