# Does innobackupex support both encryption, compression and stream in parallel

**URL:** <https://forums.percona.com/t/does-innobackupex-support-both-encryption-compression-and-stream-in-parallel/3543>\
**Category:** Percona XtraBackup\
**Created:** [June 11, 2014, 10:24pm UTC](https://forums.percona.com/t/does-innobackupex-support-both-encryption-compression-and-stream-in-parallel/3543 "2014-06-11T22:24:33Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ooaung](https://avatars.discourse-cdn.com/v4/letter/o/8797f3/32.png) [@ooaung](https://forums.percona.com/u/ooaung)\
**Post date:** [June 11, 2014, 10:24pm UTC](https://forums.percona.com/t/does-innobackupex-support-both-encryption-compression-and-stream-in-parallel/3543/1 "2014-06-11T22:24:33Z")

</div>

Hello,

I am trying to stream the encrypted backup data to a remote host with the following command but not working. Did I miss something ?

/usr/bin/innobackupex --encrypt=AES256 --encrypt-key-file=keyfile --stream=xbstream --user=root --password=$mysqlPwd --no-timestamp --include=“$TARGETDB” --extra-lsndir=$MYCURRENTBASEDIR ./ | ssh $remoteHost “xbstream -x -C /tmp/backup/”  
…  
140611 20:47:01 innobackupex: Connecting to MySQL server with DSN ‘dbi:mysql:;mysql\_read\_default\_group=xtrabackup’ as ‘root’ (using password: YES).  
140611 20:47:01 innobackupex: Connected to MySQL server  
140611 20:47:01 innobackupex: Executing a version check against the server…  
140611 20:47:01 innobackupex: Done.  
IMPORTANT: Please check that the backup run completes successfully.  
At the end of a successful backup run innobackupex  
prints “completed OK!”.

innobackupex: Using mysql server version 5.5.32-MariaDB-log

innobackupex: Created backup directory ./  
xbcrypt:encrypt: unable to set libgcrypt cipher key - User defined source 1 : Invalid key length  
innobackupex: ‘xbstream -c | xbcrypt --encrypt-algo=AES256 --encrypt-key-file=keyfile’ returned with exit code 1.  
innobackupex: Error: Failed to stream ‘/…/…/…/var/tmp/backup-my.cnf’: 1 at /usr/bin/innobackupex line 4758.

Thanks,

---

<div class="post-metadata">

**Author:** ![ooaung](https://avatars.discourse-cdn.com/v4/letter/o/8797f3/32.png) [@ooaung](https://forums.percona.com/u/ooaung)\
**Post date:** [June 12, 2014, 8:05pm UTC](https://forums.percona.com/t/does-innobackupex-support-both-encryption-compression-and-stream-in-parallel/3543/2 "2014-06-12T20:05:42Z")

</div>

Resolved. The issue is in my keyfile. 🙂

---

<div class="post-metadata">

**Author:** ![suyashjain](https://avatars.discourse-cdn.com/v4/letter/s/a9a28c/32.png) [@suyashjain](https://forums.percona.com/u/suyashjain)\
**Post date:** [February 12, 2016, 1:54am UTC](https://forums.percona.com/t/does-innobackupex-support-both-encryption-compression-and-stream-in-parallel/3543/3 "2016-02-12T01:54:12Z")

</div>

Hi,

i am also facing the same problem, can you tell me how did you resolve the issue.

I am trying to create enc file like this.

openssl enc -aes-256-cbc -k secret123sec\_8dv4j89t4jit4u89t7 -P -md sha1 | grep key | cut -d’=’ -f2 \> DB\_ENC\_STR

---

<div class="post-metadata">

**Author:** ![kyefrancis](https://avatars.discourse-cdn.com/v4/letter/k/e495f1/32.png) [@kyefrancis](https://forums.percona.com/u/kyefrancis)\
**Post date:** [October 7, 2016, 2:24am UTC](https://forums.percona.com/t/does-innobackupex-support-both-encryption-compression-and-stream-in-parallel/3543/4 "2016-10-07T02:24:56Z")

</div>

just to put this here as it was the fix to my issue and first link on google

[url][Percona XtraBackup](https://www.percona.com/doc/percona-xtrabackup/2.1/innobackupex/encrypted_backups_innobackupex.html%5B/url%5D)

Depending on the text editor used for making the KEYFILE, text file in some cases can contain the CRLF and this will cause the key size to grow and thus making it invalid. Suggested way to do this would be to create the file with: echo -n “A1EDC73815467C083B0869508406637E” \> /data/backups/keyfile

---

<div class="post-metadata">

**Author:** ![Kooky](https://avatars.discourse-cdn.com/v4/letter/k/77aa72/32.png) [@Kooky](https://forums.percona.com/u/Kooky)\
**Post date:** [February 21, 2018, 6:58am UTC](https://forums.percona.com/t/does-innobackupex-support-both-encryption-compression-and-stream-in-parallel/3543/5 "2018-02-21T06:58:03Z")

</div>

Hi,  
Thank you so much for this topic.  
I have a question about exporting the encryption key file.  
The error that I have:  
encryption: unable to set libgcrypt cipher key - User defined source 1 : Invalid key length  
When I checked, I understoot that it’s a problem with the encryption\_key file that I exported.  
For example, in my script when I replace:  
“–encrypt-key-file=${encryptionkeyfile}”  
by: “–encrypt-key-=78JKDSKJ78DSKJB37823BUIKDSKJ32HJ”  
it works  
I would like to know how can I export the key file  
I saw somewhere that text file in some cases can contain the CRLF.  
Even when I used:  
echo -n “A1EDC73815467C083B0869508406637E” \> /data/backups/encryption\_key  
It’s not work.  
Some help please!!