mirror of
https://github.com/hashicorp/vault.git
synced 2025-11-07 20:01:42 +01:00
daf72aa427
* Fix export of HMAC typed keys When initially implemented, exporting HMAC keys resulted in returning the unused, internal HMACKey value rather than the main Key value that is used for HMAC operations. This is a breaking change. Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> * Consistently handle HMAC keys in keysutil When generating HMAC-typed keys, set HMACKey = Key consistently, to allow users of HMAC-typed keys to use them backwards compatibly. Notably, this could discard the (unused) HMACKey field set today. Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> * Add test proving export of HMAC keys work Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> * Add changelog entry Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> --------- Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
6 lines
438 B
Plaintext
6 lines
438 B
Plaintext
```release-note:bug
|
|
secrets/transit: Fix export of HMAC-only key, correctly exporting the key used for sign operations. For consumers of the previously incorrect key, use the plaintext export to retrieve these incorrect keys and import them as new versions.
|
|
secrets/transit: Fix bug related to shorter dedicated HMAC key sizing.
|
|
sdk/helper/keysutil: New HMAC type policies will have HMACKey equal to Key and be copied over on import.
|
|
```
|