Since AEM 6.3 master key is no longer located in the JCR repository, hence it can't be downloaded from /etc/key/master. It's been moved to filesystem and its location can be determined by checking com.adobe.granite.crypto.file bundle ID.
This PR changes the way master key is loaded (both approaches are supported to provide backwards compatibility). Additionally the way decryption process dependencies are extracted from primary JAR file got reimplemented to handle new AEM versions gracefully.
Since AEM 6.3 master key is no longer located in the JCR repository, hence it can't be downloaded from
/etc/key/master. It's been moved to filesystem and its location can be determined by checkingcom.adobe.granite.crypto.filebundle ID.This PR changes the way master key is loaded (both approaches are supported to provide backwards compatibility). Additionally the way decryption process dependencies are extracted from primary JAR file got reimplemented to handle new AEM versions gracefully.
Details: http://www.nateyolles.com/blog/2017/05/sharing-crypto-keys-in-aem-63