Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Key rotation #119

Closed
rpicard opened this issue Oct 7, 2015 · 2 comments · Fixed by #128
Closed

Key rotation #119

rpicard opened this issue Oct 7, 2015 · 2 comments · Fixed by #128
Assignees
@kevgliss

Comments

@rpicard
Copy link
Contributor

rpicard commented Oct 7, 2015

What is the process for rotating the encryption key used with Lemur? Lets say I accidentally copy it into an IRC chat. What are my next steps?

If there isn't any tooling built-in to help with this, I think it would be a great thing to have. I haven't done much research into the best way to do it, but a good starting point might be: https://cryptography.io/en/latest/fernet/#cryptography.fernet.MultiFernet

It might make sense to look into this at the same time as issue #117 is being addressed.
@rpicard
Copy link
Contributor Author

rpicard commented Oct 7, 2015

I can probably contribute some code to this if we come to a consensus on what this should look like.

rpicard added a commit to rpicard/lemur that referenced this issue Oct 10, 2015
@rpicard
Use MultiFernet for encryption
bfd1bae 
Facilitates key rotation and uses more secure encryption than what
sqlalchemy-utils does.

Fixes Netflix#117 and Netflix#119.
@rpicard rpicard mentioned this issue Oct 12, 2015
Merged
3 tasks
rpicard added a commit to rpicard/lemur that referenced this issue Oct 13, 2015
@rpicard
Use MultiFernet for encryption
40eb950 
Facilitates key rotation and uses more secure encryption than what
sqlalchemy-utils does.

Fixes Netflix#117 and Netflix#119.
@kevgliss
Copy link
Contributor

Closed by #123

@kevgliss kevgliss mentioned this issue Oct 23, 2015
Merged
@kevgliss kevgliss self-assigned this Oct 23, 2015
nezdolik pushed a commit to spotify/lemur that referenced this issue Mar 23, 2023
@bgres
cleanup supervisor and nginx references (Netflix#119)
56ee3ed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@kevgliss kevgliss

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

[WIP] Adding aes - fernet migration kevgliss/lemur
2 participants
@rpicard @kevgliss