-
Notifications
You must be signed in to change notification settings - Fork 315
Closed
Description
Four of the SDK crates unconditionally depend on ring: storage, data_cosmos, storage_datalake, and messaging_servicebus. In order to comply with the Microsoft security policy we must use openssl instead of ring. This can probably be configured using features like in core. However it's not obvious to me what the code should do if ring and openssl are present.
The current use of ring appears to be entirely confined to hmac:
- https://github.com/Azure/azure-sdk-for-rust/blob/main/sdk/storage_datalake/src/shared_key_authorization_policy.rs#L228
- https://github.com/Azure/azure-sdk-for-rust/blob/main/sdk/messaging_servicebus/src/event_hub/client.rs#L32
- https://github.com/Azure/azure-sdk-for-rust/blob/main/sdk/data_cosmos/src/authorization_policy.rs#L233
- https://github.com/Azure/azure-sdk-for-rust/blob/main/sdk/storage/src/core/shared_access_signature/mod.rs#L14
- https://github.com/Azure/azure-sdk-for-rust/blob/main/sdk/storage/src/core/clients/storage_account_client.rs#L460
Metadata
Metadata
Assignees
Labels
No labels