Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Endpoint /kas_public_key returns PEM CERTIFICATE instead of PUBLIC KEY #678

Open
pflynn-virtru opened this issue Apr 28, 2024 · 2 comments
Labels
bug Something isn't working needs triage

Comments

@pflynn-virtru
Copy link
Member

endpoint is not as expected.

Also, opentdf.yaml is not as expected

      ec:
        123:
          publicKeyPath: kas-ec-cert.pem
@pflynn-virtru pflynn-virtru added the bug Something isn't working label Apr 28, 2024
@pflynn-virtru
Copy link
Member Author

pflynn-virtru commented Apr 29, 2024

The HSM endpoint returns PUBLIC KEY, not certificate

curl https://kas.arkavo.net/kas/kas_public_key

returns

"-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yE/v85MrilgJGmCP8Ez\naZuceBcptltm3PCY4ZzIJ4GB7i1tKSlLkaIOUcInE5ipPfEoWOlSxETjFA7tQkpL\nYK7zp1x9A86FvL4NfZQikY/BuGwU1vRM6qGIbXAdDmhqvaAryfHnVEbzylayPFZK\nVItLnA5+WXGo/5jJ1wI7+oNT4faIgkAhKBRtye3jiyWGJ/CIjLWCW5fBw1R9Jxdi\nruRVQVXKs73SDUmQwQxmZUq31xuZQavHapXQ0P9Shc7jbdEHrMEOyMCeJTxPPSLc\n+ES0QXp8hYKEfgXoKcOjQEsPJB830xSZjtRc5+rawjdj6KEMXPoweerBNsU5IA26\n4QIDAQAB\n-----END PUBLIC KEY-----\n\n"%  

@biscoe916
Copy link
Member

@pflynn-virtru Can you further clarify what the issue is. Is it that if HSM is enabled you get a pub key, and if it's not enabled you get the full PEM encoded pub key?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working needs triage
Projects
None yet
Development

No branches or pull requests

3 participants