vault

mirror of https://github.com/hashicorp/vault.git synced 2025-08-23 15:41:07 +02:00

History

Do not generate HMAC keys for CMAC keys on calls to Upgrade (#27156 )

* Do not generate HMAC keys for CMAC keys on calls to Upgrade

 - Missed during the initial development of the Transit CMAC feature,
   on initial key creation we did not generate HMAC keys when the key
   type was CMAC. The call to the policy's Upgrade function though
   would treat this key as requiring an upgrade and add one back.
 - Fix this by adding an HMACSupported argument and verifying
   on upgrade for HMAC creation that the key type supports HMAC
 - Add generic test that verifies we aren't changing a key type iota
   value, string it defined and the proper operation of HMACSupported
   and CMACSupported functions

* Add warning to test variable

2024-05-21 16:12:01 +00:00

cache.go

adding copyright header (#19555 )

2023-03-15 09:00:52 -07:00

consts.go

Use enumer to generate String() methods for most enums (#25705 )

2024-04-17 11:14:14 -07:00

encrypted_key_storage_test.go

adding copyright header (#19555 )

2023-03-15 09:00:52 -07:00

encrypted_key_storage.go

adding copyright header (#19555 )