# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1737646736 -3600
# Node ID 844e7bf7b48a7e7f0a788e5240392d017ddd24f2
# Parent  0fe27632a837f17f465f61dbe1a84b6b271fd489
util.sql: SQLCipher support

This enables use of encrypted databases if LuaDBI or LuaSQLite3 has been
linked against SQLCipher. Using `LD_PRELOAD` may work as well.

Requires SQLCipher >= 4.0.0 due to the use of UPSERT

diff -r 0fe27632a837 -r 844e7bf7b48a CHANGES
--- a/CHANGES	Tue Jan 21 17:21:48 2025 +0100
+++ b/CHANGES	Thu Jan 23 16:38:56 2025 +0100
@@ -46,6 +46,7 @@
 - New 'keyval+' combined keyval/map store type
 - Performance improvements in internal archive stores
 - Ability to use SQLite3 storage using LuaSQLite3 instead of LuaDBI
+- SQLCipher support
 
 ### Module API
 
diff -r 0fe27632a837 -r 844e7bf7b48a util/sql.lua
--- a/util/sql.lua	Tue Jan 21 17:21:48 2025 +0100
+++ b/util/sql.lua	Thu Jan 23 16:38:56 2025 +0100
@@ -84,6 +84,12 @@
 	dbh:autocommit(false); -- don't commit automatically
 	self.conn = dbh;
 	self.prepared = {};
+	if params.password then
+		local ok, err = self:execute(("PRAGMA key='%s'"):format(dbh:quote(params.password)));
+		if not ok then
+			return ok, err;
+		end
+	end
 	local ok, err = self:set_encoding();
 	if not ok then
 		return ok, err;
diff -r 0fe27632a837 -r 844e7bf7b48a util/sqlite3.lua
--- a/util/sqlite3.lua	Tue Jan 21 17:21:48 2025 +0100
+++ b/util/sqlite3.lua	Thu Jan 23 16:38:56 2025 +0100
@@ -114,6 +114,12 @@
 	if not dbh then return nil, err; end
 	self.conn = dbh;
 	self.prepared = {};
+	if params.password then
+		local ok, err = self:execute(("PRAGMA key='%s'"):format((params.password:gsub("'", "''"))));
+		if not ok then
+			return ok, err;
+		end
+	end
 	local ok, err = self:set_encoding();
 	if not ok then
 		return ok, err;