GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

transit

package

v1.3.10 Latest Latest Go to latest Published: Aug 26, 2020 License: MPL-2.0 Imports: 15 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

This section is empty.

This section is empty.

This section is empty.

type Seal struct {
	// contains filtered or unexported fields
}

Seal is a seal that leverages Vault's Transit secret engine

func NewSeal(logger log.Logger) *Seal

NewSeal creates a new transit seal

func (s *Seal) Decrypt(_ context.Context, in *physical.EncryptedBlobInfo) (pt []byte, err error)

Decrypt is used to decrypt the ciphertext

func (s *Seal) Encrypt(_ context.Context, plaintext []byte) (blob *physical.EncryptedBlobInfo, err error)

Encrypt is used to encrypt using Vaults Transit engine

func (s *Seal) Finalize(_ context.Context) error

Finalize is called during shutdown

func (s *Seal) Init(_ context.Context) error

Init is called during core.Initialize

func (s *Seal) KeyID() string

KeyID returns the last known key id.

func (s *Seal) SealType() string

SealType returns the seal type for this particular seal implementation.

func (s *Seal) SetConfig(config map[string]string) (map[string]string, error)

SetConfig processes the config info from the server config