daml/ledger-service
pbatko-da bd01a211f4
[DPP-418] Protect Participant TLS keys (#10629)
Adding support for accepting server's private key as an encrypted file (since storing unencrypted private key in a file system might be a risk).

Encrypted private key is assumed to be encrypted using AES or similar algorithm. The details necessary to decrypt it are be obtained from a secrets server over HTTP as JSON document. The URL to secret's server is supplied through the new `--secrets-url` CLI parameter.

One can supply private in either plaintext (old behavior) or ciphertext: if a private key's file ends with .enc suffix it is assumed to be ciphertext. Otherwise it is assumed to be plain text.

CHANGELOG_BEGIN
- [DPP-418] [Participant] Add support for supplying server's private key as an encrypted file and then decrypting it with the help of a secrets server.
CHANGELOG_END
2021-08-30 09:24:52 +02:00
..
cli-opts Simplify loading of logback file (#10592) 2021-08-17 08:46:37 +00:00
db-backend [JSON-API] key_hash field to speed up fetchByKey queries (#10631) 2021-08-23 18:15:25 +01:00
http-json [JSON-API] key_hash field to speed up fetchByKey queries (#10631) 2021-08-23 18:15:25 +01:00
http-json-cli [JSON-API/trigger-service] Refactor db conn (#10497) 2021-08-09 09:56:58 +00:00
http-json-ledger-client JSON API: log ledger connection errors at every attempt (#10581) 2021-08-16 10:30:28 +02:00
http-json-oracle Upgrade Scalatest to v3.2.9. (#10576) 2021-08-12 23:19:35 +00:00
http-json-perf [JSON-API] key_hash field to speed up fetchByKey queries (#10631) 2021-08-23 18:15:25 +01:00
http-json-testing Upgrade Scalatest to v3.2.9. (#10576) 2021-08-12 23:19:35 +00:00
jwt [DPP-418] Protect Participant TLS keys (#10629) 2021-08-30 09:24:52 +02:00
lf-value-json Upgrade Scalatest to v3.2.9. (#10576) 2021-08-12 23:19:35 +00:00
utils [JSON-API/trigger-service] Refactor db conn (#10497) 2021-08-09 09:56:58 +00:00