OpenSearch/distribution
Ryan Ernst b47b399f00
Settings: Reimplement keystore format to use FIPS compliant algorithms (#28255)
This commit switches the internal format of the elasticsearch keystore
to no longer use java's KeyStore class, but instead encrypt the binary
data of the secrets using AES-GCM. The cipher key is generated using
PBKDF2WithHmacSHA512. Tests are also added for backcompat reading the v1
and v2 formats.
2018-01-26 15:51:07 -08:00
..
bwc Require JDK 9 for compilation (#28071) 2018-01-16 13:45:13 -05:00
deb Remove RPM and Debian integration tests 2017-12-11 15:40:10 -05:00
integ-test-zip Enable GC logs by default 2017-12-03 08:33:21 -05:00
rpm Remove RPM and Debian integration tests 2017-12-11 15:40:10 -05:00
src/main Pass `java.locale.providers=COMPAT` to Java 9 onwards (#28080) 2018-01-04 16:43:51 +01:00
tar Enable GC logs by default 2017-12-03 08:33:21 -05:00
tools Settings: Reimplement keystore format to use FIPS compliant algorithms (#28255) 2018-01-26 15:51:07 -08:00
zip Enable GC logs by default 2017-12-03 08:33:21 -05:00
build.gradle Painless: Add spi jar that will be published for extending whitelists (#28302) 2018-01-18 19:16:26 -08:00