6b1e1909e9
Seal keys can be rotated. When this happens, the barrier and recovery keys should be re-encrypted with the new seal key. This change automatically re-encrypts the barrier and recovery keys with the latest seal key on the active node during the 'postUnseal' phase. |
||
|---|---|---|
| .. | ||
| alicloudkms | ||
| awskms | ||
| azurekeyvault | ||
| gcpckms | ||
| ocikms | ||
| shamir | ||
| transit | ||
| envelope.go | ||
| envelope_test.go | ||
| seal.go | ||
| seal_testing.go | ||