GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

ocikms

package

v1.3.10 Latest Latest Go to latest Published: Aug 26, 2020 License: MPL-2.0 Imports: 16 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/hashicorp/vault

Links

Open Source Insights

Documentation ¶

Overview ¶

Index ¶

Constants
type OCIKMSMechanism
type OCIKMSSeal
- func NewSeal(logger log.Logger) *OCIKMSSeal

Constants ¶

View Source

const (
	// OCI KMS key ID to use for encryption and decryption
	EnvOCIKMSSealKeyID = "VAULT_OCIKMS_SEAL_KEY_ID"
	// OCI KMS crypto endpoint to use for encryption and decryption
	EnvOCIKMSCryptoEndpoint = "VAULT_OCIKMS_CRYPTO_ENDPOINT"
	// OCI KMS management endpoint to manage keys
	EnvOCIKMSManagementEndpoint = "VAULT_OCIKMS_MANAGEMENT_ENDPOINT"
	// Maximum number of retries
	KMSMaximumNumberOfRetries = 5
	// keyID config
	KMSConfigKeyID = "key_id"
	// cryptoEndpoint config
	KMSConfigCryptoEndpoint = "crypto_endpoint"
	// managementEndpoint config
	KMSConfigManagementEndpoint = "management_endpoint"
	// authTypeAPIKey config
	KMSConfigAuthTypeAPIKey = "auth_type_api_key"
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type OCIKMSMechanism ¶

type OCIKMSMechanism uint32

OCIKMSMechanism is the method used to encrypt/decrypt in auto unseal process

type OCIKMSSeal ¶

type OCIKMSSeal struct {
	// contains filtered or unexported fields
}

func NewSeal ¶

func NewSeal(logger log.Logger) *OCIKMSSeal

NewSeal creates a new OCIKMSSeal seal with the provided logger

func (*OCIKMSSeal) Decrypt ¶

func (k *OCIKMSSeal) Decrypt(ctx context.Context, in *physical.EncryptedBlobInfo) ([]byte, error)

func (*OCIKMSSeal) Encrypt ¶

func (k *OCIKMSSeal) Encrypt(ctx context.Context, plaintext []byte) (*physical.EncryptedBlobInfo, error)

func (*OCIKMSSeal) Finalize ¶

func (k *OCIKMSSeal) Finalize(context.Context) error

func (*OCIKMSSeal) Init ¶

func (k *OCIKMSSeal) Init(context.Context) error

func (*OCIKMSSeal) KeyID ¶

func (k *OCIKMSSeal) KeyID() string

func (*OCIKMSSeal) SealType ¶

func (k *OCIKMSSeal) SealType() string

func (*OCIKMSSeal) SetConfig ¶

func (k *OCIKMSSeal) SetConfig(config map[string]string) (map[string]string, error)

Source Files ¶

View all Source files

ocikms.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL