Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove / Encrypt Private Keys in Database #45

Closed
sam-bertin opened this issue Aug 9, 2024 · 1 comment · Fixed by #50
Closed

Remove / Encrypt Private Keys in Database #45

sam-bertin opened this issue Aug 9, 2024 · 1 comment · Fixed by #50
Assignees
Labels
enhancement New feature or request

Comments

@sam-bertin
Copy link
Contributor

The private key from the SigningRequest are stored in the data base without encryption for now.
It might be a good idea to either encrypt them or remove the private key from the instance when the instance has been associated to a Certificate.

@sam-bertin sam-bertin added the question Further information is requested label Aug 9, 2024
@sergei-maertens sergei-maertens added enhancement New feature or request and removed question Further information is requested labels Aug 9, 2024
@alextreme
Copy link
Member

Discussed with @CharString, this is a valid issue. As database encryption has other problems of its own I suggest that we remove the privatekey from the SigningRequest after a valid certificate has been uploaded

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
3 participants