search

target / goalert

Open source on-call scheduling, automated escalations, and notifications so you never miss a critical alert
https://goalert.me
Apache License 2.0
2.26k stars 246 forks source link

keyring: migrate away from deprecated PEMBlock encryption methods #1304

Open dctalbot opened 3 years ago

dctalbot commented 3 years ago

What problem would you like to solve? Please describe: The x509 package has deprecated methods pertaining to PEM encryption/decryption. Even though our usage is decidedly secure (we are only protecting data at-rest), we should migrate away from this deprecated code.

Describe the solution you'd like: A refactor that does not leverage deprecated methods. The solution should also take into account backwards compatibility to some extent, potentially refreshing and upgrading existing tokens to use a new encryption scheme. At that point, we can "deprecate" the old scheme internally, and eventually remove the legacy implementation altogether.

Additional context: Search for //lint:ignore SA1019 in the keyring package

stale[bot] commented 3 years ago

This issue has been automatically marked as stale because it has not had recent activity.

m17ch commented 2 years ago

Given current state/usage, this isn't something that is high priority.
Team would need to do a bit of investigation to see if there is a replacement opportunity for this usage.

stale[bot] commented 2 years ago

This issue has been automatically marked as stale because it has not had recent activity.