open-vault/sdk/helper/keysutil
Matt Schultz fc7deabfd7
Time-based transit key autorotation (#13691)
* Add auto_rotate_interval field to transit key creation path.

* Add auto_rotate_interval field to transit key config update path.

* Implement transit automatic key rotation on an hourly interval.

* Fixes transit key autorotation key listing typo.

* Add unit tests for transit key autorotation.

* Add unit tests for transit key creation with autorotation interval.

* Add unit tests for transit key config update with autorotation interval.

* Document new auto_rotate_interval fields in key creation and key config update endpoints.

* Add changelog for transit key autorotation.

* Wrap individual transit key autorotation in a policy lock.

* Add a safeguard to transit key autorotation to ensure only one execution happens simultaneously.
2022-01-20 09:10:15 -06:00
..
cache.go transit cache is an Interface implemented by wrapped versions of sync… (#6225) 2019-06-04 15:40:56 -07:00
consts.go Adds support for SHA-3 to transit (#13367) 2021-12-08 12:29:33 -06:00
encrypted_key_storage.go Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
encrypted_key_storage_test.go Migrate to sdk/internalshared libs in go-secure-stdlib (#12090) 2021-07-15 20:17:31 -04:00
lock_manager.go Time-based transit key autorotation (#13691) 2022-01-20 09:10:15 -06:00
policy.go Time-based transit key autorotation (#13691) 2022-01-20 09:10:15 -06:00
policy_test.go Run a more strict formatter over the code (#11312) 2021-04-08 09:43:39 -07:00
transit_lru.go transit cache is an Interface implemented by wrapped versions of sync… (#6225) 2019-06-04 15:40:56 -07:00
transit_syncmap.go transit cache is an Interface implemented by wrapped versions of sync… (#6225) 2019-06-04 15:40:56 -07:00