mirror of
https://github.com/minio/minio.git
synced 2024-12-25 14:45:54 -05:00
e955aa7f2a
This commit adds support for encrypted KES client private keys. Now, it is possible to encrypt the KES client private key (`MINIO_KMS_KES_KEY_FILE`) with a password. For example, KES CLI already supports the creation of encrypted private keys: ``` kes identity new --encrypt --key client.key --cert client.crt MinIO ``` To decrypt an encrypted private key, the password needs to be provided: ``` MINIO_KMS_KES_KEY_PASSWORD=<password> ``` Signed-off-by: Andreas Auernhammer <hi@aead.dev>
79 lines
2.7 KiB
Go
79 lines
2.7 KiB
Go
// Copyright (c) 2015-2021 MinIO, Inc.
|
|
//
|
|
// This file is part of MinIO Object Storage stack
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
package config
|
|
|
|
// Config value separator
|
|
const (
|
|
ValueSeparator = ","
|
|
)
|
|
|
|
// Top level common ENVs
|
|
const (
|
|
EnvAccessKey = "MINIO_ACCESS_KEY"
|
|
EnvSecretKey = "MINIO_SECRET_KEY"
|
|
EnvRootUser = "MINIO_ROOT_USER"
|
|
EnvRootPassword = "MINIO_ROOT_PASSWORD"
|
|
|
|
// Legacy files
|
|
EnvAccessKeyFile = "MINIO_ACCESS_KEY_FILE"
|
|
EnvSecretKeyFile = "MINIO_SECRET_KEY_FILE"
|
|
|
|
// Current files
|
|
EnvRootUserFile = "MINIO_ROOT_USER_FILE"
|
|
EnvRootPasswordFile = "MINIO_ROOT_PASSWORD_FILE"
|
|
|
|
// Set all config environment variables from 'config.env'
|
|
// if necessary. Overrides all previous settings and also
|
|
// overrides all environment values passed from
|
|
// 'podman run -e ENV=value'
|
|
EnvConfigEnvFile = "MINIO_CONFIG_ENV_FILE"
|
|
|
|
EnvBrowser = "MINIO_BROWSER"
|
|
EnvDomain = "MINIO_DOMAIN"
|
|
EnvPublicIPs = "MINIO_PUBLIC_IPS"
|
|
EnvFSOSync = "MINIO_FS_OSYNC"
|
|
EnvArgs = "MINIO_ARGS"
|
|
EnvDNSWebhook = "MINIO_DNS_WEBHOOK_ENDPOINT"
|
|
|
|
EnvSiteName = "MINIO_SITE_NAME"
|
|
EnvSiteRegion = "MINIO_SITE_REGION"
|
|
|
|
EnvMinIOSubnetLicense = "MINIO_SUBNET_LICENSE" // Deprecated Dec 2021
|
|
EnvMinIOSubnetAPIKey = "MINIO_SUBNET_API_KEY"
|
|
EnvMinIOSubnetProxy = "MINIO_SUBNET_PROXY"
|
|
EnvMinIOServerURL = "MINIO_SERVER_URL"
|
|
EnvMinIOBrowserRedirectURL = "MINIO_BROWSER_REDIRECT_URL"
|
|
EnvRootDiskThresholdSize = "MINIO_ROOTDISK_THRESHOLD_SIZE"
|
|
|
|
EnvUpdate = "MINIO_UPDATE"
|
|
|
|
EnvKMSSecretKey = "MINIO_KMS_SECRET_KEY"
|
|
EnvKMSSecretKeyFile = "MINIO_KMS_SECRET_KEY_FILE"
|
|
EnvKESEndpoint = "MINIO_KMS_KES_ENDPOINT"
|
|
EnvKESKeyName = "MINIO_KMS_KES_KEY_NAME"
|
|
EnvKESClientKey = "MINIO_KMS_KES_KEY_FILE"
|
|
EnvKESClientPassword = "MINIO_KMS_KES_KEY_PASSWORD"
|
|
EnvKESClientCert = "MINIO_KMS_KES_CERT_FILE"
|
|
EnvKESServerCA = "MINIO_KMS_KES_CAPATH"
|
|
|
|
EnvEndpoints = "MINIO_ENDPOINTS" // legacy
|
|
EnvWorm = "MINIO_WORM" // legacy
|
|
EnvRegion = "MINIO_REGION" // legacy
|
|
EnvRegionName = "MINIO_REGION_NAME" // legacy
|
|
)
|