Skip to content

help request: SSL private key encryption? #7989

@C2022021

Description

@C2022021

Description

I found ssl section in config-default.yaml has a key_encrypt_salt attribute, and comment of it said:
# If not set, will save origin ssl key into etcd.
# If set this, must be a string of length 16. And it will encrypt ssl key with AES-128-CBC
# !!! So do not change it after saving your ssl, it can't decrypt the ssl keys have be saved if you change !!

But, After I setting certificate and key through APISIX Dashboard, I still can get origin ssl key from etcd by command etcdctl get --prefix "/apisix/ssl" instead of encrypt string.
I am confused that is the key encryption function has not imlpement for apisix version 2.13.3 on RHEL ? Or anything I had setting wrong in my config file?

Environment

  • APISIX version (run apisix version): 2.13.3
  • Operating system (run uname -a): RHEL 8.6
  • OpenResty / Nginx version (run openresty -V or nginx -V):
  • etcd version, if relevant (run curl http://127.0.0.1:9090/v1/server_info): 3.4.13
  • APISIX Dashboard version, if relevant: 2.13.0
  • Plugin runner version, for issues related to plugin runners:
  • LuaRocks version, for installation issues (run luarocks --version):

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions