a787f97a9c
Re-add lost stored-shares parameter to operator rekey command. ( #3974 )
...
Also change the rekey API to not require explicitly setting values to 1.
Fixes #3969
2018-02-14 16:10:45 -05:00
33b68ebf3d
Remove context from a few extraneous places
2018-01-19 03:44:06 -05:00
2f19de0305
Add context to storage backends and wire it through a lot of places ( #3817 )
2018-01-19 01:44:44 -05:00
a25dae82dd
Final sync
2017-10-23 17:39:21 -04:00
adb6ac749f
init: pgp-keys input validations
2017-01-11 23:32:38 -05:00
c29e5c8bad
Use 'http.MaxBytesReader' to limit request size ( #2131 )
...
Fix 'connection reset by peer' error introduced by 300b72e
2016-12-01 10:59:00 -08:00
722e26f27a
Add support for PGP encrypting the initial root token. ( #1883 )
2016-09-13 18:42:24 -04:00
62c69f8e19
Provide base64 keys in addition to hex encoded. ( #1734 )
...
* Provide base64 keys in addition to hex encoded.
Accept these at unseal/rekey time.
Also fix a bug where backup would not be honored when doing a rekey with
no operation currently ongoing.
2016-08-15 16:01:15 -04:00
98d09b0dc6
Add seal tests and update generate-root and others to handle dualseal.
2016-04-25 19:39:04 +00:00
a4ff72841e
Check for seal status when initing and change logic order to avoid defer
2016-04-14 01:13:59 +00:00
afae46feb7
SealInterface
2016-04-04 10:44:22 -04:00
434962c632
We treat put/post the same, so allow init to use POST
2016-02-22 20:22:31 -05:00
cc232e6f79
Address comments from review.
2015-08-25 15:33:58 -07:00
2f3e245b0b
Add support for "pgp-tokens" parameters to init.
...
There are thorough unit tests that read the returned
encrypted tokens, seal the vault, and unseal it
again to ensure all works as expected.
2015-08-25 14:52:13 -07:00
8c1b90f591
http: root token in init
2015-03-29 16:22:09 -07:00
d35b8eaa6f
http: init endpoints
2015-03-12 12:37:54 -07:00
Jeff Mitchell