[ISSUE #5695] Add config encrypt spi for nacos server. #7934
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…5695 Merge Develop
…tion for Nacos 2.0 (alibaba#6655) * Defines the interface * 增加aes实现 * 客户端、服务端加解密实现 * 客户端、服务端加解密实现
…tion for Nacos 2.0, EncryptedDataKey is persisted (alibaba#6740) * Defines the interface * 增加aes实现 * 客户端、服务端加解密实现 * 客户端、服务端加解密实现 * 秘钥持久化 * 秘钥持久化
* Defines the interface * 增加aes实现 * 客户端、服务端加解密实现 * 客户端、服务端加解密实现 * 秘钥持久化 * 秘钥持久化 * 秘钥缓存到内存中 * 解决冲突
…ba#6882) * [ISSUE#5695] Add a plugin SPI for configuration encryption and decryption for Nacos 2.0 (alibaba#6655) * Defines the interface * 增加aes实现 * 客户端、服务端加解密实现 * 客户端、服务端加解密实现 * fix code quality (alibaba#6727) * # This is a combination of 6 commits.tree cf7a399f99c4d81b8667c8de06f5ceb8c79fb6f0 parent 8024ecf author 李晓双 Li Xiao Shuang <[email protected]> 1630028256 +0800 committer lixiaoshuang <[email protected]> 1631804378 +0800 # This is a combination of 3 commits. # This is the 1st commit message: [ISSUE#5695] Add a plugin SPI for configuration encryption and decryption for Nacos 2.0, EncryptedDataKey is persisted (alibaba#6740) * Defines the interface * 增加aes实现 * 客户端、服务端加解密实现 * 客户端、服务端加解密实现 * 秘钥持久化 * 秘钥持久化 # This is the commit message alibaba#2: [ISSUE#5695] Summer2021 Cache encryptedDataKey (alibaba#6878) * Defines the interface * 增加aes实现 * 客户端、服务端加解密实现 * 客户端、服务端加解密实现 * 秘钥持久化 * 秘钥持久化 * 秘钥缓存到内存中 * 解决冲突 # This is the commit message alibaba#3: 修改filter继承AbstractConfigFilter (alibaba#6879) # This is the commit message alibaba#6: 客户端、服务端加解密实现 * parent 8024ecf author 李晓双 Li Xiao Shuang <[email protected]> 1630028256 +0800 committer lixiaoshuang <[email protected]> 1631805204 +0800 parent 8024ecf author 李晓双 Li Xiao Shuang <[email protected]> 1630028256 +0800 committer lixiaoshuang <[email protected]> 1631804378 +0800 [ISSUE#5695] Add a plugin SPI for configuration encryption and decryption for Nacos 2.0, EncryptedDataKey is persisted (alibaba#6740) * 配置加解密插件 * derby支持秘钥存储
…ncryption and decryption (alibaba#6956) * 克隆功能兼容配置加解密 * 导入导出兼容配置加解密
…#6991) * add unit test for ConfigCryptoFilter * add unit test for ConfigCryptoFilter
* add unit test for CryptoExecutor * add Copyright
* add unit test for CryptoManager * add unit test for CryptoManager
* add unit test for AesCrypto * update AesCryptoTest
…5695 [ISSUE#5695] Summer2021. Merge develop
…5695 Merge Develop
[ISSUE alibaba#7313] IV initial vector size is 16 bytes, take the first 16 bytes of secret Key
…5695_fix Summer2021 issue#5695 fix javadoc
…5695_fix Summer2021 issue#5695 fix unit test
KomachiSion
requested changes
Mar 14, 2022
realJackSun
approved these changes
Mar 16, 2022
KomachiSion
approved these changes
Mar 16, 2022
|
请确认本次更新是否打破了兼容性，表结构新增了字段，sql没保持兼容，考虑到1.4.x与2.0.x用户的升级，建议升级文档补充说明 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
fix : #5695
The default encryption and decryption implementation is in：
https://github.com/nacos-group/nacos-plugin
Please do not create a Pull Request without creating an issue first.
What is the purpose of the change
XXXXX
Brief changelog
XX
Verifying this change
XXXX
Follow this checklist to help us incorporate your contribution quickly and easily:
[ISSUE #123] Fix UnknownException when host config not exist. Each commit in the pull request should have a meaningful subject line and body.mvn -B clean package apache-rat:check findbugs:findbugs -Dmaven.test.skip=trueto make sure basic checks pass. Runmvn clean install -DskipITsto make sure unit-test pass. Runmvn clean test-compile failsafe:integration-testto make sure integration-test pass.