Skip to content

Conversation

@rarvikar
Copy link
Contributor

Reverts #288

@CLAassistant
Copy link

CLAassistant commented Oct 11, 2022

CLA assistant check
All committers have signed the CLA.

@rarvikar rarvikar requested a review from MichelDiz October 11, 2022 21:27
@netlify
Copy link

netlify bot commented Oct 11, 2022

Deploy Preview for dgraph-docs-repo ready!

Name Link
🔨 Latest commit 8c202b1
🔍 Latest deploy log https://app.netlify.com/sites/dgraph-docs-repo/deploys/6345dfaec0b5930008a447aa
😎 Deploy Preview https://deploy-preview-313--dgraph-docs-repo.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site settings.

@joshua-goldstein
Copy link
Contributor

joshua-goldstein commented Oct 11, 2022

There are at least two kinds of encryption in Dgraph

  • Encryption at rest
  • Audit log encryption

Unfortunately in the code base it is not clear which packages are responsible for which. The code in ee/audit/run_ee.go is responsible for parsing the flags related to audit log encryption. To enable audit log encryption, one runs

dgraph alpha --audit output=audit-log-dir;compress=true;encrypt-file=/path/to/encrypt/key/file

and to decrypt audit logs, one runs

dgraph audit decrypt --encryption_key_file=/path/encrypt/key/file --in /path/to/encrypted/log/file --out /path/to/output/file

See docs here (currently incorrect) The code where the flag is parsed is here.

For encryption at rest, one uses

dgraph alpha --encryption key-file="./enc_key_file" --my="localhost:7080" --zero="localhost:5080"

See docs here.

@joshua-goldstein
Copy link
Contributor

Closing because this was based on a misunderstanding @rarvikar @MichelDiz

@joshua-goldstein joshua-goldstein deleted the revert-288-joshua/docs-run_ee.go branch August 26, 2023 02:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

5 participants