kms

Nov 19, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Oct 10, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Oct 1, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Aug 14, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jul 30, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Aug 19, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jun 14, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

May 28, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Apr 29, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jul 29, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Apr 9, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Mar 21, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Mar 7, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Feb 27, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jan 30, 2024 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Mar 7, 2024 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Dec 12, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Oct 31, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Oct 17, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Oct 6, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jul 14, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jun 9, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Changes in this version

type ExternalWrappers

+ func (e *ExternalWrappers) Bsr() wrapping.Wrapper

type KeyPurpose

+ const KeyPurposeBsr

type Option

+ func WithBsrWrapper(w wrapping.Wrapper) Option

Apr 4, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Mar 9, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Feb 8, 2023 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Changes in this version

+ type GetWrapperer interface

+ GetWrapper func(ctx context.Context, scopeId string, purpose KeyPurpose, opt ...Option) (wrapping.Wrapper, error)

+ type MockGetWrapperer struct

+ GetErr error

+ Kms *Kms

+ ReturnWrapper wrapping.Wrapper

+ func (m *MockGetWrapperer) GetWrapper(ctx context.Context, scopeId string, purpose KeyPurpose, opt ...Option) (wrapping.Wrapper, error)

+ type MockWrapper struct

+ DecryptErr error

+ EncryptErr error

+ KeyIdErr error

+ KeyIdReturned string

+ Wrapper wrapping.Wrapper

+ func (w *MockWrapper) Decrypt(ctx context.Context, ciphertext *wrapping.BlobInfo, options ...wrapping.Option) ([]byte, error)

+ func (w *MockWrapper) Encrypt(ctx context.Context, plaintext []byte, options ...wrapping.Option) (*wrapping.BlobInfo, error)

+ func (w *MockWrapper) KeyId(ctx context.Context) (string, error)

+ func (w *MockWrapper) SetConfig(ctx context.Context, options ...wrapping.Option) (*wrapping.WrapperConfig, error)

+ func (w *MockWrapper) Type(ctx context.Context) (wrapping.WrapperType, error)

Dec 8, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Nov 23, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Changes in this version

+ func ListTablesSupportingRewrap() []string

+ func RegisterTableRewrapFn(tableName string, rewrapFn RewrapFn)

+ type DataKeyVersionDestructionJob struct

+ func (c *DataKeyVersionDestructionJob) Clone() *DataKeyVersionDestructionJob

+ func (k *DataKeyVersionDestructionJob) TableName() string

+ type DataKeyVersionDestructionJobProgress struct

+ func (c *DataKeyVersionDestructionJobProgress) Clone() *DataKeyVersionDestructionJobProgress

+ func (k *DataKeyVersionDestructionJobProgress) TableName() string

+ type DataKeyVersionDestructionJobRun struct

+ func (c *DataKeyVersionDestructionJobRun) Clone() *DataKeyVersionDestructionJobRun

+ func (k *DataKeyVersionDestructionJobRun) TableName() string

+ type DataKeyVersionDestructionJobRunAllowedTableName struct

+ func (c *DataKeyVersionDestructionJobRunAllowedTableName) Clone() *DataKeyVersionDestructionJobRunAllowedTableName

+ func (k *DataKeyVersionDestructionJobRunAllowedTableName) TableName() string

type Kms

+ func (k *Kms) DestroyKeyVersion(ctx context.Context, scopeId string, keyVersionId string, _ ...Option) (bool, error)

+ func (k *Kms) ListDataKeyVersionDestructionJobs(ctx context.Context, scopeId string, _ ...Option) ([]*DataKeyVersionDestructionJobProgress, error)

+ func (k *Kms) ListDataKeyVersionReferencers(ctx context.Context, opt ...Option) ([]string, error)

+ func (k *Kms) ListKeys(ctx context.Context, scopeId string, _ ...Option) ([]wrappingKms.Key, error)

+ func (k *Kms) MonitorDataKeyVersionDestruction(ctx context.Context) error

+ func (k *Kms) MonitorTableRewrappingRuns(ctx context.Context, tableName string, _ ...Option) (retErr error)

+ func (k *Kms) RotateKeys(ctx context.Context, scopeId string, opt ...Option) error

type Option

+ func WithRewrap(enableRewrap bool) Option

+ type RewrapFn func(ctx context.Context, dataKeyVersionId string, scopeId string, reader db.Reader, ...) error

Sep 27, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Sep 14, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Sep 12, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Aug 30, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Aug 22, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Aug 11, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Aug 9, 2022 GO-2023-1898 +2 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jul 6, 2022 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jun 20, 2022 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Changes in this version

+ func TestKmsDeleteAllKeys(t testing.TB, conn *db.DB)

+ func TestKmsDeleteKeyPurpose(t testing.TB, conn *db.DB, purpose KeyPurpose)

type KeyPurpose

+ const KeyPurposeRootKey

+ const KeyPurposeWorkerAuth

+ const KeyPurposeWorkerAuthStorage

+ func ValidDekPurposes() []KeyPurpose

type Kms

+ func New(ctx context.Context, reader *db.Db, writer *db.Db, _ ...Option) (*Kms, error)

+ func NewUsingReaderWriter(ctx context.Context, reader db.Reader, writer db.Writer, _ ...Option) (*Kms, error)

+ func (k *Kms) ClearCache(ctx context.Context) error

+ func (k *Kms) CreateKeys(ctx context.Context, scopeId string, opt ...Option) error

+ func (k *Kms) VerifyGlobalRoot(ctx context.Context) error

type Option

+ func WithRandomReader(randomReader io.Reader) Option

+ func WithReaderWriter(r db.Reader, w db.Writer) Option

+ func WithWorkerAuthStorageWrapper(w wrapping.Wrapper) Option

May 16, 2022 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

May 3, 2022 GO-2024-2532 +1 more

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Changes in this version

type Option

+ func WithScopeIds(scopeId ...string) Option

Mar 15, 2022 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Feb 17, 2022 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jan 13, 2022 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Dec 16, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Dec 15, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Nov 19, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Nov 17, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Changes in this version

+ const AuditKeyPrefix

+ const AuditKeyVersionPrefix

+ const DefaultAuditKeyTableName

+ const DefaultAuditKeyVersionTableName

+ type AuditKey struct

+ func AllocAuditKey() AuditKey

+ func NewAuditKey(ctx context.Context, rootKeyId string, _ ...Option) (*AuditKey, error)

+ func TestAuditKey(t *testing.T, conn *db.DB, rootKeyId string) *AuditKey

+ func (k *AuditKey) Clone() interface{}

+ func (k *AuditKey) SetTableName(n string)

+ func (k *AuditKey) TableName() string

+ func (k *AuditKey) VetForWrite(ctx context.Context, r db.Reader, opType db.OpType, opt ...db.Option) error

+ type AuditKeyVersion struct

+ func AllocAuditKeyVersion() AuditKeyVersion

+ func NewAuditKeyVersion(ctx context.Context, auditKeyId string, key []byte, rootKeyVersionId string, ...) (*AuditKeyVersion, error)

+ func TestAuditKeyVersion(t *testing.T, conn *db.DB, rootKeyVersionWrapper wrapping.Wrapper, ...) *AuditKeyVersion

+ func (k *AuditKeyVersion) Clone() interface{}

+ func (k *AuditKeyVersion) Decrypt(ctx context.Context, cipher wrapping.Wrapper) error

+ func (k *AuditKeyVersion) Encrypt(ctx context.Context, cipher wrapping.Wrapper) error

+ func (k *AuditKeyVersion) SetTableName(n string)

+ func (k *AuditKeyVersion) TableName() string

+ func (k *AuditKeyVersion) VetForWrite(ctx context.Context, r db.Reader, opType db.OpType, opt ...db.Option) error

type KeyPurpose

+ const KeyPurposeAudit

type KeyType

+ const KeyTypeAuditKey

+ const KeyTypeAuditKeyVersion

type Kms

+ func (k *Kms) ReconcileKeys(ctx context.Context, randomReader io.Reader) error

type Repository

+ func (r *Repository) CreateAuditKey(ctx context.Context, rkvWrapper wrapping.Wrapper, key []byte, _ ...Option) (*AuditKey, *AuditKeyVersion, error)

+ func (r *Repository) CreateAuditKeyVersion(ctx context.Context, rkvWrapper wrapping.Wrapper, auditKeyId string, ...) (*AuditKeyVersion, error)

+ func (r *Repository) DeleteAuditKey(ctx context.Context, privateId string, _ ...Option) (int, error)

+ func (r *Repository) DeleteAuditKeyVersion(ctx context.Context, privateId string, _ ...Option) (int, error)

+ func (r *Repository) LatestAuditKeyVersion(ctx context.Context, rkvWrapper wrapping.Wrapper, AuditKeyId string, ...) (*AuditKeyVersion, error)

+ func (r *Repository) ListAuditKeyVersions(ctx context.Context, rkvWrapper wrapping.Wrapper, AuditKeyId string, ...) ([]DekVersion, error)

+ func (r *Repository) ListAuditKeys(ctx context.Context, opt ...Option) ([]Dek, error)

+ func (r *Repository) LookupAuditKey(ctx context.Context, privateId string, _ ...Option) (*AuditKey, error)

+ func (r *Repository) LookupAuditKeyVersion(ctx context.Context, keyWrapper wrapping.Wrapper, privateId string, ...) (*AuditKeyVersion, error)

Sep 27, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Sep 15, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Sep 8, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Aug 19, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Aug 5, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jun 30, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jun 8, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

May 21, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

May 18, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

May 5, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Apr 14, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Changes in this version

+ func NewDerivedReader(wrapper wrapping.Wrapper, lenLimit int64, salt, info []byte) (*io.LimitedReader, error)

type Kms

+ func (k *Kms) GetDerivedPurposeCache() *sync.Map

type Option

+ func WithOrderByVersion(orderBy db.OrderBy) Option

Mar 9, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Feb 16, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Feb 12, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Jan 29, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Changes in this version

+ const DefaultOidcKeyTableName

+ const DefaultOidcKeyVersionTableName

+ const OidcKeyPrefix

+ const OidcKeyVersionPrefix

type KeyPurpose

+ const KeyPurposeOidc

type KeyType

+ const KeyTypeOidcKey

+ const KeyTypeOidcKeyVersion

+ type OidcKey struct

+ func AllocOidcKey() OidcKey

+ func NewOidcKey(rootKeyId string, _ ...Option) (*OidcKey, error)

+ func TestOidcKey(t *testing.T, conn *gorm.DB, rootKeyId string) *OidcKey

+ func (k *OidcKey) Clone() interface{}

+ func (k *OidcKey) SetTableName(n string)

+ func (k *OidcKey) TableName() string

+ func (k *OidcKey) VetForWrite(ctx context.Context, r db.Reader, opType db.OpType, opt ...db.Option) error

+ type OidcKeyVersion struct

+ func AllocOidcKeyVersion() OidcKeyVersion

+ func NewOidcKeyVersion(oidcKeyId string, key []byte, rootKeyVersionId string, _ ...Option) (*OidcKeyVersion, error)

+ func TestOidcKeyVersion(t *testing.T, conn *gorm.DB, rootKeyVersionWrapper wrapping.Wrapper, ...) *OidcKeyVersion

+ func (k *OidcKeyVersion) Clone() interface{}

+ func (k *OidcKeyVersion) Decrypt(ctx context.Context, cipher wrapping.Wrapper) error

+ func (k *OidcKeyVersion) Encrypt(ctx context.Context, cipher wrapping.Wrapper) error

+ func (k *OidcKeyVersion) SetTableName(n string)

+ func (k *OidcKeyVersion) TableName() string

+ func (k *OidcKeyVersion) VetForWrite(ctx context.Context, r db.Reader, opType db.OpType, opt ...db.Option) error

type Repository

+ func (r *Repository) CreateOidcKey(ctx context.Context, rkvWrapper wrapping.Wrapper, key []byte, _ ...Option) (*OidcKey, *OidcKeyVersion, error)

+ func (r *Repository) CreateOidcKeyVersion(ctx context.Context, rkvWrapper wrapping.Wrapper, oidcKeyId string, key []byte, ...) (*OidcKeyVersion, error)

+ func (r *Repository) DeleteOidcKey(ctx context.Context, privateId string, _ ...Option) (int, error)

+ func (r *Repository) DeleteOidcKeyVersion(ctx context.Context, privateId string, _ ...Option) (int, error)

+ func (r *Repository) LatestOidcKeyVersion(ctx context.Context, rkvWrapper wrapping.Wrapper, OidcKeyId string, ...) (*OidcKeyVersion, error)

+ func (r *Repository) ListOidcKeyVersions(ctx context.Context, rkvWrapper wrapping.Wrapper, OidcKeyId string, ...) ([]DekVersion, error)

+ func (r *Repository) ListOidcKeys(ctx context.Context, opt ...Option) ([]Dek, error)

+ func (r *Repository) LookupOidcKey(ctx context.Context, privateId string, _ ...Option) (*OidcKey, error)

+ func (r *Repository) LookupOidcKeyVersion(ctx context.Context, keyWrapper wrapping.Wrapper, privateId string, ...) (*OidcKeyVersion, error)

Jan 5, 2021 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Dec 18, 2020 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Nov 16, 2020 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Oct 22, 2020 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Oct 13, 2020 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Changes in this version

+ const DatabaseKeyPrefix

+ const DatabaseKeyVersionPrefix

+ const DefaultDatabaseKeyTableName

+ const DefaultDatabaseKeyVersionTableName

+ const DefaultOplogKeyTableName

+ const DefaultOplogKeyVersionTableName

+ const DefaultRootKeyTableName

+ const DefaultRootKeyVersionTableName

+ const DefaultSessionKeyTableName

+ const DefaultSessionKeyVersionTableName

+ const DefaultTokenKeyTableName

+ const DefaultTokenKeyVersionTableName

+ const OplogKeyPrefix

+ const OplogKeyVersionPrefix

+ const RootKeyPrefix

+ const RootKeyVersionPrefix

+ const SessionKeyPrefix

+ const SessionKeyVersionPrefix

+ const TokenKeyPrefix

+ const TokenKeyVersionPrefix

+ type DatabaseKey struct

+ func AllocDatabaseKey() DatabaseKey

+ func NewDatabaseKey(rootKeyId string, opt ...Option) (*DatabaseKey, error)

+ func TestDatabaseKey(t *testing.T, conn *gorm.DB, rootKeyId string) *DatabaseKey

+ func (k *DatabaseKey) Clone() interface{}

+ func (k *DatabaseKey) SetTableName(n string)

+ func (k *DatabaseKey) TableName() string

+ func (k *DatabaseKey) VetForWrite(ctx context.Context, r db.Reader, opType db.OpType, opt ...db.Option) error

+ type DatabaseKeyVersion struct

+ func AllocDatabaseKeyVersion() DatabaseKeyVersion

+ func NewDatabaseKeyVersion(databaseKeyId string, key []byte, rootKeyVersionId string, opt ...Option) (*DatabaseKeyVersion, error)

+ func TestDatabaseKeyVersion(t *testing.T, conn *gorm.DB, rootKeyVersionWrapper wrapping.Wrapper, ...) *DatabaseKeyVersion

+ func (k *DatabaseKeyVersion) Clone() interface{}

+ func (k *DatabaseKeyVersion) Decrypt(ctx context.Context, cipher wrapping.Wrapper) error

+ func (k *DatabaseKeyVersion) Encrypt(ctx context.Context, cipher wrapping.Wrapper) error

+ func (k *DatabaseKeyVersion) SetTableName(n string)

+ func (k *DatabaseKeyVersion) TableName() string

+ func (k *DatabaseKeyVersion) VetForWrite(ctx context.Context, r db.Reader, opType db.OpType, opt ...db.Option) error

+ type Dek interface

+ GetPrivateId func() string

+ GetRootKeyId func() string

+ type DekVersion interface

+ GetKey func() []byte

+ GetPrivateId func() string

+ type ExternalWrappers struct

+ func (e *ExternalWrappers) Recovery() wrapping.Wrapper

+ func (e *ExternalWrappers) Root() wrapping.Wrapper

+ func (e *ExternalWrappers) WorkerAuth() wrapping.Wrapper

+ type KeyIder interface

+ GetPrivateId func() string

+ type KeyPurpose uint

+ const KeyPurposeDatabase

+ const KeyPurposeOplog

+ const KeyPurposeRecovery

+ const KeyPurposeSessions

+ const KeyPurposeTokens

+ const KeyPurposeUnknown

+ func (k KeyPurpose) String() string

+ type KeyType uint

+ const KeyTypeDatabaseKey

+ const KeyTypeDatabaseKeyVersion

+ const KeyTypeOplogKey

+ const KeyTypeOplogKeyVersion

+ const KeyTypeRootKey

+ const KeyTypeRootKeyVersion

+ const KeyTypeSessionKey

+ const KeyTypeSessionKeyVersion

+ const KeyTypeTokenKey

+ const KeyTypeTokenKeyVersion

+ const KeyTypeUnknown

+ func (k KeyType) String() string

+ type Keys map[KeyType]KeyIder

+ func CreateKeysTx(ctx context.Context, dbReader db.Reader, dbWriter db.Writer, ...) (Keys, error)

+ type Kms struct

+ func NewKms(repo *Repository, opt ...Option) (*Kms, error)

+ func TestKms(t *testing.T, conn *gorm.DB, rootWrapper wrapping.Wrapper) *Kms

+ func (k *Kms) AddExternalWrappers(opt ...Option) error

+ func (k *Kms) GetExternalWrappers() *ExternalWrappers

+ func (k *Kms) GetScopePurposeCache() *sync.Map

+ func (k *Kms) GetWrapper(ctx context.Context, scopeId string, purpose KeyPurpose, opt ...Option) (wrapping.Wrapper, error)

+ type OplogKey struct

+ func AllocOplogKey() OplogKey

+ func NewOplogKey(rootKeyId string, opt ...Option) (*OplogKey, error)

+ func TestOplogKey(t *testing.T, conn *gorm.DB, rootKeyId string) *OplogKey

+ func (k *OplogKey) Clone() interface{}

+ func (k *OplogKey) SetTableName(n string)

+ func (k *OplogKey) TableName() string

+ func (k *OplogKey) VetForWrite(ctx context.Context, r db.Reader, opType db.OpType, opt ...db.Option) error

+ type OplogKeyVersion struct

+ func AllocOplogKeyVersion() OplogKeyVersion

+ func NewOplogKeyVersion(oplogKeyId string, key []byte, rootKeyVersionId string, opt ...Option) (*OplogKeyVersion, error)

+ func TestOplogKeyVersion(t *testing.T, conn *gorm.DB, rootKeyVersionWrapper wrapping.Wrapper, ...) *OplogKeyVersion

+ func (k *OplogKeyVersion) Clone() interface{}

+ func (k *OplogKeyVersion) Decrypt(ctx context.Context, cipher wrapping.Wrapper) error

+ func (k *OplogKeyVersion) Encrypt(ctx context.Context, cipher wrapping.Wrapper) error

+ func (k *OplogKeyVersion) SetTableName(n string)

+ func (k *OplogKeyVersion) TableName() string

+ func (k *OplogKeyVersion) VetForWrite(ctx context.Context, r db.Reader, opType db.OpType, opt ...db.Option) error

+ type Option func(*options)

+ func WithKeyId(keyId string) Option

+ func WithLimit(limit int) Option

+ func WithLogger(l hclog.Logger) Option

+ func WithOrder(order string) Option

+ func WithRecoveryWrapper(w wrapping.Wrapper) Option

+ func WithRepository(repo *Repository) Option

+ func WithRootWrapper(w wrapping.Wrapper) Option

+ func WithWorkerAuthWrapper(w wrapping.Wrapper) Option

+ type Repository struct

+ func NewRepository(r db.Reader, w db.Writer, opt ...Option) (*Repository, error)

+ func (r *Repository) CreateDatabaseKey(ctx context.Context, rkvWrapper wrapping.Wrapper, key []byte, opt ...Option) (*DatabaseKey, *DatabaseKeyVersion, error)

+ func (r *Repository) CreateDatabaseKeyVersion(ctx context.Context, rkvWrapper wrapping.Wrapper, databaseKeyId string, ...) (*DatabaseKeyVersion, error)

+ func (r *Repository) CreateOplogKey(ctx context.Context, rkvWrapper wrapping.Wrapper, key []byte, opt ...Option) (*OplogKey, *OplogKeyVersion, error)

+ func (r *Repository) CreateOplogKeyVersion(ctx context.Context, rkvWrapper wrapping.Wrapper, oplogKeyId string, ...) (*OplogKeyVersion, error)

+ func (r *Repository) CreateRootKey(ctx context.Context, keyWrapper wrapping.Wrapper, scopeId string, key []byte, ...) (*RootKey, *RootKeyVersion, error)

+ func (r *Repository) CreateRootKeyVersion(ctx context.Context, keyWrapper wrapping.Wrapper, rootKeyId string, key []byte, ...) (*RootKeyVersion, error)

+ func (r *Repository) CreateSessionKey(ctx context.Context, rkvWrapper wrapping.Wrapper, key []byte, opt ...Option) (*SessionKey, *SessionKeyVersion, error)

+ func (r *Repository) CreateSessionKeyVersion(ctx context.Context, rkvWrapper wrapping.Wrapper, sessionKeyId string, ...) (*SessionKeyVersion, error)

+ func (r *Repository) CreateTokenKey(ctx context.Context, rkvWrapper wrapping.Wrapper, key []byte, opt ...Option) (*TokenKey, *TokenKeyVersion, error)

+ func (r *Repository) CreateTokenKeyVersion(ctx context.Context, rkvWrapper wrapping.Wrapper, tokenKeyId string, ...) (*TokenKeyVersion, error)

+ func (r *Repository) DefaultLimit() int

+ func (r *Repository) DeleteDatabaseKey(ctx context.Context, privateId string, opt ...Option) (int, error)

+ func (r *Repository) DeleteDatabaseKeyVersion(ctx context.Context, privateId string, opt ...Option) (int, error)

+ func (r *Repository) DeleteOplogKey(ctx context.Context, privateId string, opt ...Option) (int, error)

+ func (r *Repository) DeleteOplogKeyVersion(ctx context.Context, privateId string, opt ...Option) (int, error)

+ func (r *Repository) DeleteRootKey(ctx context.Context, privateId string, opt ...Option) (int, error)

+ func (r *Repository) DeleteRootKeyVersion(ctx context.Context, privateId string, opt ...Option) (int, error)

+ func (r *Repository) DeleteSessionKey(ctx context.Context, privateId string, opt ...Option) (int, error)

+ func (r *Repository) DeleteSessionKeyVersion(ctx context.Context, privateId string, opt ...Option) (int, error)

+ func (r *Repository) DeleteTokenKey(ctx context.Context, privateId string, opt ...Option) (int, error)

+ func (r *Repository) DeleteTokenKeyVersion(ctx context.Context, privateId string, opt ...Option) (int, error)

+ func (r *Repository) LatestDatabaseKeyVersion(ctx context.Context, rkvWrapper wrapping.Wrapper, databaseKeyId string, ...) (*DatabaseKeyVersion, error)

+ func (r *Repository) LatestOplogKeyVersion(ctx context.Context, rkvWrapper wrapping.Wrapper, oplogKeyId string, ...) (*OplogKeyVersion, error)

+ func (r *Repository) LatestRootKeyVersion(ctx context.Context, keyWrapper wrapping.Wrapper, rootKeyId string, ...) (*RootKeyVersion, error)

+ func (r *Repository) LatestSessionKeyVersion(ctx context.Context, rkvWrapper wrapping.Wrapper, sessionKeyId string, ...) (*SessionKeyVersion, error)

+ func (r *Repository) LatestTokenKeyVersion(ctx context.Context, rkvWrapper wrapping.Wrapper, tokenKeyId string, ...) (*TokenKeyVersion, error)

+ func (r *Repository) ListDatabaseKeyVersions(ctx context.Context, rkvWrapper wrapping.Wrapper, databaseKeyId string, ...) ([]DekVersion, error)

+ func (r *Repository) ListDatabaseKeys(ctx context.Context, opt ...Option) ([]Dek, error)

+ func (r *Repository) ListOplogKeyVersions(ctx context.Context, rkvWrapper wrapping.Wrapper, oplogKeyId string, ...) ([]DekVersion, error)

+ func (r *Repository) ListOplogKeys(ctx context.Context, opt ...Option) ([]Dek, error)

+ func (r *Repository) ListRootKeyVersions(ctx context.Context, keyWrapper wrapping.Wrapper, rootKeyId string, ...) ([]*RootKeyVersion, error)

+ func (r *Repository) ListRootKeys(ctx context.Context, opt ...Option) ([]*RootKey, error)

+ func (r *Repository) ListSessionKeyVersions(ctx context.Context, rkvWrapper wrapping.Wrapper, sessionKeyId string, ...) ([]DekVersion, error)

+ func (r *Repository) ListSessionKeys(ctx context.Context, opt ...Option) ([]Dek, error)

+ func (r *Repository) ListTokenKeyVersions(ctx context.Context, rkvWrapper wrapping.Wrapper, tokenKeyId string, ...) ([]DekVersion, error)

+ func (r *Repository) ListTokenKeys(ctx context.Context, opt ...Option) ([]Dek, error)

+ func (r *Repository) LookupDatabaseKey(ctx context.Context, privateId string, opt ...Option) (*DatabaseKey, error)

+ func (r *Repository) LookupDatabaseKeyVersion(ctx context.Context, keyWrapper wrapping.Wrapper, privateId string, ...) (*DatabaseKeyVersion, error)

+ func (r *Repository) LookupOplogKey(ctx context.Context, privateId string, opt ...Option) (*OplogKey, error)

+ func (r *Repository) LookupOplogKeyVersion(ctx context.Context, keyWrapper wrapping.Wrapper, privateId string, ...) (*OplogKeyVersion, error)

+ func (r *Repository) LookupRootKey(ctx context.Context, keyWrapper wrapping.Wrapper, privateId string, ...) (*RootKey, error)

+ func (r *Repository) LookupRootKeyVersion(ctx context.Context, keyWrapper wrapping.Wrapper, privateId string, ...) (*RootKeyVersion, error)

+ func (r *Repository) LookupSessionKey(ctx context.Context, privateId string, opt ...Option) (*SessionKey, error)

+ func (r *Repository) LookupSessionKeyVersion(ctx context.Context, keyWrapper wrapping.Wrapper, privateId string, ...) (*SessionKeyVersion, error)

+ func (r *Repository) LookupTokenKey(ctx context.Context, privateId string, opt ...Option) (*TokenKey, error)

+ func (r *Repository) LookupTokenKeyVersion(ctx context.Context, keyWrapper wrapping.Wrapper, privateId string, ...) (*TokenKeyVersion, error)

+ type RootKey struct

+ func AllocRootKey() RootKey

+ func NewRootKey(scopeId string, opt ...Option) (*RootKey, error)

+ func TestRootKey(t *testing.T, conn *gorm.DB, scopeId string) *RootKey

+ func (c *RootKey) SetTableName(n string)

+ func (k *RootKey) Clone() interface{}

+ func (k *RootKey) TableName() string

+ func (k *RootKey) VetForWrite(ctx context.Context, r db.Reader, opType db.OpType, opt ...db.Option) error

+ type RootKeyVersion struct

+ func AllocRootKeyVersion() RootKeyVersion

+ func NewRootKeyVersion(rootKeyId string, key []byte, opt ...Option) (*RootKeyVersion, error)

+ func TestRootKeyVersion(t *testing.T, conn *gorm.DB, wrapper wrapping.Wrapper, rootId string) (kv *RootKeyVersion, kvWrapper wrapping.Wrapper)

+ func (k *RootKeyVersion) Clone() interface{}

+ func (k *RootKeyVersion) Decrypt(ctx context.Context, cipher wrapping.Wrapper) error

+ func (k *RootKeyVersion) Encrypt(ctx context.Context, cipher wrapping.Wrapper) error

+ func (k *RootKeyVersion) SetTableName(n string)

+ func (k *RootKeyVersion) TableName() string

+ func (k *RootKeyVersion) VetForWrite(ctx context.Context, r db.Reader, opType db.OpType, opt ...db.Option) error

+ type SessionKey struct

+ func AllocSessionKey() SessionKey

+ func NewSessionKey(rootKeyId string, opt ...Option) (*SessionKey, error)

+ func TestSessionKey(t *testing.T, conn *gorm.DB, rootKeyId string) *SessionKey

+ func (k *SessionKey) Clone() interface{}

+ func (k *SessionKey) SetTableName(n string)

+ func (k *SessionKey) TableName() string

+ func (k *SessionKey) VetForWrite(ctx context.Context, r db.Reader, opType db.OpType, opt ...db.Option) error

+ type SessionKeyVersion struct

+ func AllocSessionKeyVersion() SessionKeyVersion

+ func NewSessionKeyVersion(sessionKeyId string, key []byte, rootKeyVersionId string, opt ...Option) (*SessionKeyVersion, error)

+ func TestSessionKeyVersion(t *testing.T, conn *gorm.DB, rootKeyVersionWrapper wrapping.Wrapper, ...) *SessionKeyVersion

+ func (k *SessionKeyVersion) Clone() interface{}

+ func (k *SessionKeyVersion) Decrypt(ctx context.Context, cipher wrapping.Wrapper) error

+ func (k *SessionKeyVersion) Encrypt(ctx context.Context, cipher wrapping.Wrapper) error

+ func (k *SessionKeyVersion) SetTableName(n string)

+ func (k *SessionKeyVersion) TableName() string

+ func (k *SessionKeyVersion) VetForWrite(ctx context.Context, r db.Reader, opType db.OpType, opt ...db.Option) error

+ type TokenKey struct

+ func AllocTokenKey() TokenKey

+ func NewTokenKey(rootKeyId string, opt ...Option) (*TokenKey, error)

+ func TestTokenKey(t *testing.T, conn *gorm.DB, rootKeyId string) *TokenKey

+ func (k *TokenKey) Clone() interface{}

+ func (k *TokenKey) SetTableName(n string)

+ func (k *TokenKey) TableName() string

+ func (k *TokenKey) VetForWrite(ctx context.Context, r db.Reader, opType db.OpType, opt ...db.Option) error

+ type TokenKeyVersion struct

+ func AllocTokenKeyVersion() TokenKeyVersion

+ func NewTokenKeyVersion(tokenKeyId string, key []byte, rootKeyVersionId string, opt ...Option) (*TokenKeyVersion, error)

+ func TestTokenKeyVersion(t *testing.T, conn *gorm.DB, rootKeyVersionWrapper wrapping.Wrapper, ...) *TokenKeyVersion

+ func (k *TokenKeyVersion) Clone() interface{}

+ func (k *TokenKeyVersion) Decrypt(ctx context.Context, cipher wrapping.Wrapper) error

+ func (k *TokenKeyVersion) Encrypt(ctx context.Context, cipher wrapping.Wrapper) error

+ func (k *TokenKeyVersion) SetTableName(n string)

+ func (k *TokenKeyVersion) TableName() string

+ func (k *TokenKeyVersion) VetForWrite(ctx context.Context, r db.Reader, opType db.OpType, opt ...db.Option) error

Oct 2, 2020 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Sep 28, 2020 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

Sep 25, 2020 GO-2024-3335

  GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary