Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

config options to specify preferred key algorithms for zts sign operations #2222

Merged
merged 1 commit into from
Jul 4, 2023

Conversation

havetisyan
Copy link
Collaborator

@havetisyan havetisyan commented Jul 3, 2023

Three config options are setup with default EC value to maintain existing (and preferred) behavior:

If the ZTS has both EC and RSA private keys defined, then this setting
# specifies the preferred algorithm for signing json web objects such
# as access tokens, jws policy files, etc.
#athenz.zts.key_algo_json_web_objects=EC

# If the ZTS has both EC and RSA private keys defined, then this setting
# specifies the preferred algorithm for signing proprietary objects such
# role tokens, json policy files, etc.
#athenz.zts.key_algo_proprietary_objects=EC

# If the ZTS has both EC and RSA private keys defined, then this setting
# specifies the preferred algorithm for the private key to be passed
# to the plugins if they require the server's private key
#athenz.zts.key_algo_plugins=EC

…tions

Signed-off-by: Henry Avetisyan <hga@yahooinc.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants