Project

General

Profile

Actions

Task #2670

closed

CzechIdM container complains about "weird secret key" when using 256b AES key

Added by Petr Fišer about 3 years ago. Updated almost 3 years ago.

Status:
Closed
Priority:
Low
Assignee:
Tomáš Doischer
Target version:
Start date:
01/29/2021
Due date:
% Done:

100%

Estimated time:
Owner:

Description

There is a hardcoded check in https://github.com/bcvsolutions/czechidm-docker/blob/master/images/czechidm/runscripts/runEvery.d/001_001-createIdMSecretkey.sh#L34
where runscript tests for 128b AES key. We added also an 256b AES support so this check should be extended to "17B or 33B".

Apart from the warning, there is no effect on the application and/or the container.

Actions #1

Updated by Petr Fišer about 3 years ago

  • Project changed from IdStory IdM containers to bcv-czechidm
Actions #2

Updated by Petr Fišer almost 3 years ago

  • Target version set to 10.8.2-r1
Actions #3

Updated by Tomáš Doischer almost 3 years ago

  • Status changed from New to Needs feedback
  • Assignee set to Tomáš Doischer
  • % Done changed from 0 to 80

I added the second condition to the if statement but made no changes to README (key length is not mentioned there). I tested the change, it works nicely.

Commit: https://github.com/bcvsolutions/czechidm-docker/commit/68bb86a81ffe97ed9478cd07ae86836041331d96

@fiserp, can you give me feedback?

Actions #4

Updated by Petr Fišer almost 3 years ago

Looks good.
If you tested this and it works, please, merge it into develop. ;)

Actions #5

Updated by Tomáš Doischer almost 3 years ago

  • Status changed from Needs feedback to Resolved
  • % Done changed from 80 to 100

Merged into develop, awaiting release.

Actions #6

Updated by Petr Fišer almost 3 years ago

  • Status changed from Resolved to Closed

Released in 10.8.2-r1.

Actions

Also available in: Atom PDF