2023-03-15 16:00:52 +00:00
|
|
|
// Copyright (c) HashiCorp, Inc.
|
|
|
|
// SPDX-License-Identifier: MPL-2.0
|
|
|
|
|
2022-02-17 19:43:07 +00:00
|
|
|
package vault
|
|
|
|
|
|
|
|
import (
|
|
|
|
"context"
|
|
|
|
|
2022-09-13 17:03:19 +00:00
|
|
|
"github.com/hashicorp/go-uuid"
|
2022-06-27 21:41:56 +00:00
|
|
|
"github.com/hashicorp/vault/command/server"
|
2022-02-17 19:43:07 +00:00
|
|
|
"github.com/hashicorp/vault/sdk/logical"
|
|
|
|
)
|
|
|
|
|
2022-06-27 21:41:56 +00:00
|
|
|
// GetCoreConfigInternal returns the server configuration
|
|
|
|
// in struct format.
|
|
|
|
func (c *Core) GetCoreConfigInternal() *server.Config {
|
|
|
|
conf := c.rawConfig.Load()
|
|
|
|
if conf == nil {
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
return conf.(*server.Config)
|
|
|
|
}
|
|
|
|
|
2022-02-17 19:43:07 +00:00
|
|
|
func (c *Core) loadHeaderHMACKey(ctx context.Context) error {
|
|
|
|
ent, err := c.barrier.Get(ctx, indexHeaderHMACKeyPath)
|
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
|
|
|
|
if ent != nil {
|
|
|
|
c.IndexHeaderHMACKey.Store(ent.Value)
|
|
|
|
}
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
|
|
|
func (c *Core) headerHMACKey() []byte {
|
|
|
|
key := c.IndexHeaderHMACKey.Load()
|
|
|
|
if key == nil {
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
return key.([]byte)
|
|
|
|
}
|
|
|
|
|
|
|
|
func (c *Core) setupHeaderHMACKey(ctx context.Context, isPerfStandby bool) error {
|
|
|
|
if c.IsPerfSecondary() || c.IsDRSecondary() || isPerfStandby {
|
|
|
|
return c.loadHeaderHMACKey(ctx)
|
|
|
|
}
|
|
|
|
ent, err := c.barrier.Get(ctx, indexHeaderHMACKeyPath)
|
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
|
|
|
|
if ent != nil {
|
|
|
|
c.IndexHeaderHMACKey.Store(ent.Value)
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
|
|
|
key, err := uuid.GenerateUUID()
|
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
err = c.barrier.Put(ctx, &logical.StorageEntry{
|
|
|
|
Key: indexHeaderHMACKeyPath,
|
|
|
|
Value: []byte(key),
|
|
|
|
})
|
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
c.IndexHeaderHMACKey.Store([]byte(key))
|
|
|
|
return nil
|
|
|
|
}
|