7 Commits

Author	SHA1	Message	Date
Scott Miller	377f7459af	Convert to Go 1.17 go:build directive (#13579)	2022-01-05 12:02:03 -06:00
ncabatoff	afcba41190	Shamir seals now come in two varieties: legacy and new-style. (#7694) ... Shamir seals now come in two varieties: legacy and new-style. Legacy Shamir is automatically converted to new-style when a rekey operation is performed. All new Vault initializations using Shamir are new-style. New-style Shamir writes an encrypted master key to storage, just like AutoUnseal. The stored master key is encrypted using the shared key that is split via Shamir's algorithm. Thus when unsealing, we take the key fragments given, combine them into a Key-Encryption-Key, and use that to decrypt the master key on disk. Then the master key is used to read the keyring that decrypts the barrier.	2019-10-18 14:46:00 -04:00
Jeff Mitchell	2f5b464bc9	Seal migration (OSS) (#781)	2018-10-22 23:34:02 -07:00
Jeff Mitchell	b7d6d55ac1	The big one (#5346)	2018-09-17 23:03:00 -04:00
Seth Vargo	1d688e2bc6	Validate operator init args (#4838)	2018-06-26 10:15:00 -04:00
Jeff Mitchell	324422162a	Also exclude init command from race detector	2018-02-16 11:09:36 -05:00
Seth Vargo	ef86e95eff	Add "operator" subcommand	2017-10-24 09:30:48 -04:00