Feature #2929

Generate CR encryption key during package installation

Added by Dominic Cleal about 4 years ago. Updated over 3 years ago.

Status:Closed
Priority:Normal
Assigned To:Dominic Cleal
Category:Packaging
Target version:Sprint 22
Difficulty: Bugzilla link:
Found in release: Pull request:
Story points-
Velocity based estimate-
Release1.5.0Release relationshipAuto

Description

In #2424, compute resource passwords gained the ability to be encrypted. This requires that a key is generated and existing passwords are encrypted via the new rake tasks.

rake security:generate_encryption_key     # Generate new encryption key
rake db:compute_resources:decrypt # Decrypt compute resource fields
rake db:compute_resources:encrypt # Encrypt compute resource fields

The generate task creates a key at ~foreman/config/initializers/encryption_key.rb but I suggest for the purposes of packaging, we move this to /etc/foreman after it's created and symlink it back into place. Ensure permissions are tight.


Related issues

Related to Foreman - Feature #2424: encrypt compute resource password Closed 04/24/2013

Associated revisions

Revision c5f9c1ac
Added by Dominic Cleal over 3 years ago

refs #2929 - generate encryption key and encrypt data in postinstall

Revision fab676e8
Added by Dominic Cleal over 3 years ago

fixes #2929 - generate encryption key and encrypt data in postinstall

History

#1 Updated by Dominic Cleal about 4 years ago

  • Related to Feature #2424: encrypt compute resource password added

#2 Updated by Dominic Cleal about 4 years ago

  • Status changed from New to Assigned
  • Assigned To set to Dominic Cleal

#3 Updated by Lukas Zapletal about 4 years ago

  • Target version changed from 1.3.0 to 1.4.0

#4 Updated by Greg Sutcliffe almost 4 years ago

  • Target version deleted (1.4.0)

#5 Updated by Dmitri Dolguikh almost 4 years ago

  • Target version set to Sprint 17

#6 Updated by Dominic Cleal almost 4 years ago

  • Target version changed from Sprint 17 to Sprint 18

#7 Updated by Dmitri Dolguikh over 3 years ago

  • Target version deleted (Sprint 18)

#8 Updated by Dmitri Dolguikh over 3 years ago

  • Target version set to Sprint 21

#10 Updated by Dominic Cleal over 3 years ago

  • Status changed from Assigned to Ready For Testing

#11 Updated by Dmitri Dolguikh over 3 years ago

  • Target version changed from Sprint 21 to Sprint 22

#12 Updated by Dominic Cleal over 3 years ago

  • Release set to 1.5.0

#13 Updated by Lukas Zapletal over 3 years ago

  • Status changed from Ready For Testing to Closed

Merged as fab676e.

Also available in: Atom PDF