x509.Decrypt(Encrypt)PEMBlock deprecated starting go1.16

akash-network / support

Akash Support and Issue Tracking

Apache License 2.0

5 stars 4 forks source link

x509.Decrypt(Encrypt)PEMBlock deprecated starting go1.16 #59

Closed troian closed 11 months ago

troian commented 3 years ago

has been deprecated since Go 1.16 because it shouldn't be used: Legacy PEM encryption as specified in RFC 1423 is insecure by design. Since it does not authenticate the ciphertext, it is vulnerable to padding oracle attacks that can let an attacker recover the plaintext.

https://github.com/golang/go/issues/41949

should start using PKCS8 ?

troian commented 11 months ago

fixed in v0.26.0 network upgrade