Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix uaa start. Prevent exception if encryption section missing #2767

Merged
merged 5 commits into from
Mar 19, 2024

Conversation

strehle
Copy link
Member

@strehle strehle commented Mar 6, 2024

The encryption service is not usable if no passphrase set, but that service is not in use at all - currently.

The encryption service is not usable if no passphrase set, but that service
is not in use at all - currently.
@cf-gitbot
Copy link

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/187182262

The labels on this github issue will be updated when the story is started.

@strehle strehle linked an issue Mar 6, 2024 that may be closed by this pull request
The encryption service is not usable if no passphrase set, but that service
is not in use at all - currently.
@strehle strehle requested review from torsten-sap and a team March 6, 2024 15:41
@peterhaochen47
Copy link
Member

Summary of OSS sync: this was for MFA feature (which is already removed); hence these fields are currently unused. But this PR keeps them in case there is future usage.

@strehle
Copy link
Member Author

strehle commented Mar 15, 2024

@peterhaochen47 @Tallicia can you please take this PR in review. For us it means less Ops but for UAA there is no risk to break something, because these classes are not in use - but they need a secret key currently

@strehle strehle changed the title Prevent start exception if encryption section missing Fix uaa start. Prevent exception if encryption section missing Mar 18, 2024
@strehle strehle added the bug label Mar 18, 2024
@strehle
Copy link
Member Author

strehle commented Mar 18, 2024

@@ -44,4 +46,9 @@ public void decrypt_shouldNotDecryptWithInvalidPassphrase() throws EncryptionSer
assertThat(ciphertext, is(notNullValue()));
new EncryptionService("invalid-password").decrypt(ciphertext);
}

@Test
public void initShouldWorkWithEmptyKey() {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good to see the test!

}

@Test
public void shouldNotThrowErrorIfNoActiveKeyLabelIsProvided() {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good test

Copy link
Contributor

@Tallicia Tallicia left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks good.

@Tallicia Tallicia added the accepted Accepted the issue label Mar 18, 2024
@strehle strehle merged commit 71d5768 into develop Mar 19, 2024
20 checks passed
@strehle strehle deleted the fixUaaStart branch March 19, 2024 05:36
@cf-gitbot cf-gitbot removed unscheduled accepted Accepted the issue labels Mar 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
Development

Successfully merging this pull request may close these issues.

Either fix missing encryption_keys or remove it
4 participants