Fix Aliyun KMS suite #376
Merged
Fix Aliyun KMS suite #376
Commits on Oct 18, 2023
-
cdh/kms/aliyun: fix credential reading
Openssl was used before. However currently openssl marks RC2 in pkcs12 as `legacy`, which will cause an error when try to decrypt the credential with password. This commit tries to decrypt the pkcs12 manually with der bytes. Signed-off-by: Xynnn007 <xynnn@linux.alibaba.com>
-
cdh/kms/aliyun: use rustls for client
native-tls leverages openssl that does not support RC2 in rust wrapper. Signed-off-by: Xynnn007 <xynnn@linux.alibaba.com>
-
cdh/kms/aliyun: fix wrong KMS instance endpoint
`https://` prefix will be added when doing requests. Signed-off-by: Xynnn007 <xynnn@linux.alibaba.com>
-
cdh/kms/aliyun: add docs for sealed secret guide
Signed-off-by: Xynnn007 <xynnn@linux.alibaba.com>
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.