search

voxpupuli / puppet-openssl

Puppet OpenSSL module
Apache License 2.0
38 stars 84 forks source link

Correctly pass secrets via environment variables to avoid them being visible in process lists #228

Closed ekohl closed 3 weeks ago

ekohl commented 3 weeks ago

This was merged via a private branch because it was a security issue. CI doesn't run there and this slipped through.

Fixes: 25df78714f2147735197322d322418f5b38c5fa4 ("Send passwords via environment variables")

ekohl commented 3 weeks ago

I'm not sure I like the "revert, fix prior commit & apply fixed commit", but it was the easiest for me to wrap my head around.

ekohl commented 3 weeks ago

Now updated with a link to https://github.com/puppetlabs/puppet/issues/9493 in the comment.