You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.
In some cases it's necessary to run standard utilities (like gfix) or services tasks against encrypted database on remote server. When database key is known to the client there are no security issues with using that key in any attachment tot database including standard utilities.
Existing plugins should be checked before used with this new feature. Although no new methods are added existing one may be called in a sequence not used before.
There are 2 known issues:
1. If key transfer is performed in a multi-step way sequence of that calls may be wrong (as a simple example - when first request from server is expected by plugin fbclient may pass to it data normally used with second request). Make sure plugin returns zero (i.e. data not accepted) in such cases.
2. Method chainHandle() was used before only to bypass a key through holder plugin. To make subj work KeyHolder at the client side should be able to load keys from some external source and sent them using interface returned by chainHandle().
Submitted by: @AlexPeshkoff
In some cases it's necessary to run standard utilities (like gfix) or services tasks against encrypted database on remote server. When database key is known to the client there are no security issues with using that key in any attachment tot database including standard utilities.
Commits: 0453bbe
The text was updated successfully, but these errors were encountered: