Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Refactor init & recovery to use KMS URI instead of mastersecret #987

Merged
merged 3 commits into from
Jan 19, 2023

Commits on Jan 18, 2023

  1. keyservice: move kms code to internal/kms

    Recovery (disk-mapper) and init (bootstrapper)
    will have to work with multiple external KMSes
    in the future.
    derpsteb committed Jan 18, 2023
    Configuration menu
    Copy the full SHA
    71eaa30 View commit details
    Browse the repository at this point in the history

Commits on Jan 19, 2023

  1. Refactor init/recovery to use kms URI

    So far the masterSecret was sent to the initial bootstrapper
    on init/recovery. With this commit this information is encoded
    in the kmsURI that is sent during init.
    For recover, the communication with the recoveryserver is
    changed. Before a streaming gRPC call was used to
    exchanges UUID for measurementSecret and state disk key.
    Now a standard gRPC is made that includes the same kmsURI &
    storageURI that are sent during init.
    derpsteb committed Jan 19, 2023
    Configuration menu
    Copy the full SHA
    e319cd1 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    70b910e View commit details
    Browse the repository at this point in the history