Skip to content

x509.Decrypt(Encrypt)PEMBlock deprecated starting go1.16 #59

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
troian opened this issue Mar 22, 2021 · 1 comment
Closed

x509.Decrypt(Encrypt)PEMBlock deprecated starting go1.16 #59

troian opened this issue Mar 22, 2021 · 1 comment
Assignees
@troian
Labels
repo/node Akash node repo issues repo/provider Akash provider-services repo issues sev1

Comments

@troian
Copy link
Member

troian commented Mar 22, 2021 •
edited
Loading 

has been deprecated since Go 1.16 because it shouldn't be used: Legacy PEM encryption as specified in RFC 1423 is insecure by design. Since it does not authenticate the ciphertext, it is vulnerable to padding oracle attacks that can let an attacker recover the plaintext.

golang/go#41949

should start using PKCS8 ?
@troian troian transferred this issue from akash-network/node Feb 17, 2023
@troian troian self-assigned this Feb 17, 2023
@troian troian added repo/node Akash node repo issues repo/provider Akash provider-services repo issues labels Feb 17, 2023
@troian troian added the sev1 label Mar 1, 2023
@troian troian mentioned this issue Mar 15, 2023
Closed
troian added a commit to akash-network/node that referenced this issue Mar 15, 2023
@troian
fix: use 3rd-party lib encode mtls private key into PKCS8
26ec97c 
refs akash-network/support#24
refs akash-network/support#59

Signed-off-by: Artur Troian <[email protected]>
@troian troian mentioned this issue Mar 15, 2023
Merged
troian added a commit to akash-network/node that referenced this issue Mar 15, 2023
@troian
fix: use 3rd-party lib encode mtls private key into PKCS8
71a9049 
refs akash-network/support#24
refs akash-network/support#59

Signed-off-by: Artur Troian <[email protected]>
troian added a commit to akash-network/node that referenced this issue Mar 15, 2023
@troian
fix: use 3rd-party lib encode mtls private key into PKCS8
2eee1e3 
refs akash-network/support#24
refs akash-network/support#59

Signed-off-by: Artur Troian <[email protected]>
troian added a commit to akash-network/node that referenced this issue Mar 16, 2023
@troian
fix: use 3rd-party lib encode mtls private key into PKCS8 (#1777)
37e3ffa 
refs akash-network/support#24
refs akash-network/support#59

Signed-off-by: Artur Troian <[email protected]>
troian added a commit to akash-network/node that referenced this issue Apr 17, 2023
@troian
fix: use 3rd-party lib encode mtls private key into PKCS8 (#1777)
3d53e65 
refs akash-network/support#24
refs akash-network/support#59

Signed-off-by: Artur Troian <[email protected]>
@troian
Copy link
Member Author

troian commented Sep 27, 2023

fixed in v0.26.0 network upgrade

@troian troian closed this as completed Sep 27, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@troian troian

Labels
repo/node Akash node repo issues repo/provider Akash provider-services repo issues sev1
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@troian