Skip to content

Using unique string for cipher generation#2045

Merged
ketan merged 1 commit intogocd:masterfrom
jyotisingh:rekey_cipher
Mar 11, 2016
Merged

Using unique string for cipher generation#2045
ketan merged 1 commit intogocd:masterfrom
jyotisingh:rekey_cipher

Conversation

@jyotisingh
Copy link
Contributor

re-generation of cipher and re-encryption of secure values in config when unsafe cipher is available.

This cipher is used for encryption of secure variables in Go's config

@jyotisingh jyotisingh added this to the Release 16.3 milestone Mar 10, 2016
}

private String reEncryptUsingNewKey(byte[] oldCipher, byte[] newCipher, String encryptedValue) throws InvalidCipherTextException {
GoCipher cipher = new GoCipher();
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can make this a field, if needed. Ok to leave it in too. I thought that every call to CipherProvider#primeKeyCache reads the cipher file. But, it is private static volatile. So, it doesn't.

…d re-encryption of secure values in config when unsafe cipher is available
ketan added a commit that referenced this pull request Mar 11, 2016
Using unique string for cipher generation
@ketan ketan merged commit cc59624 into gocd:master Mar 11, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants