mirror of
https://github.com/minio/minio.git
synced 2024-12-25 22:55:54 -05:00
50a68a1791
- Supports object locked buckets that require PutObject() to set content-md5 always. - Use SSE-S3 when S3 gateway is being used instead of SSE-KMS for auto-encryption.
62 lines
1.9 KiB
Go
62 lines
1.9 KiB
Go
// Copyright (c) 2015-2021 MinIO, Inc.
|
|
//
|
|
// This file is part of MinIO Object Storage stack
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
package cmd
|
|
|
|
import (
|
|
"errors"
|
|
"io"
|
|
|
|
sse "github.com/minio/minio/internal/bucket/encryption"
|
|
)
|
|
|
|
// BucketSSEConfigSys - in-memory cache of bucket encryption config
|
|
type BucketSSEConfigSys struct{}
|
|
|
|
// NewBucketSSEConfigSys - Creates an empty in-memory bucket encryption configuration cache
|
|
func NewBucketSSEConfigSys() *BucketSSEConfigSys {
|
|
return &BucketSSEConfigSys{}
|
|
}
|
|
|
|
// Get - gets bucket encryption config for the given bucket.
|
|
func (sys *BucketSSEConfigSys) Get(bucket string) (*sse.BucketSSEConfig, error) {
|
|
if globalIsGateway {
|
|
objAPI := newObjectLayerFn()
|
|
if objAPI == nil {
|
|
return nil, errServerNotInitialized
|
|
}
|
|
|
|
return nil, BucketSSEConfigNotFound{Bucket: bucket}
|
|
}
|
|
|
|
return globalBucketMetadataSys.GetSSEConfig(bucket)
|
|
}
|
|
|
|
// validateBucketSSEConfig parses bucket encryption configuration and validates if it is supported by MinIO.
|
|
func validateBucketSSEConfig(r io.Reader) (*sse.BucketSSEConfig, error) {
|
|
encConfig, err := sse.ParseBucketSSEConfig(r)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
if len(encConfig.Rules) == 1 {
|
|
return encConfig, nil
|
|
}
|
|
|
|
return nil, errors.New("Unsupported bucket encryption configuration")
|
|
}
|