-
-
Notifications
You must be signed in to change notification settings - Fork 4.6k
SSE: make legacy format opt in #22218
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Done |
nickvergessen
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Bail out immediately when you found a negative one.
nickvergessen
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🦈
0913b37 to
48476df
Compare
|
Some failing tests are related, others need a rebase |
48476df to
19d7de6
Compare
* Systems that upgrade have this enabled by default * New systems disable it * We'll have to add some wargning in the setup checks if this is enabled Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
19d7de6 to
2bbb848
Compare
|
🤖 beep boop beep 🤖 Here are the logs for the failed build: Status of 31974: failuremysql5.6-php7.2Show full logacceptance-app-files
Show full log |
|
Writing the docs is on my list for tomorrow |
|
/backport to stable19 |
|
Don't forget the documentation :) We already have on issue report for the new setup check: #22478 |
|
@rullzer What dose it mean by legacy format i enabled server side encryption when i installed NC 18. Do we need to stop using server side encryption ? |
|
@axheli Legacy format here means the encryption scheme that was used before authenticated encryption was introduced back in 2016. When you first started using the SSE with NC 18 you are not using the legacy format. |
|
I guess it's safe to ignore the warning for now. The condition to show the warning is wrong. |
|
@yahesh Got it thank you so much for explaining it. |
|
Run |
|
@nickvergessen running it. Going to check it out! I have a few servers but I think this one was created a long time ago. |
Basically a switch (off by default for new installations) to support the legacy format or not.
This should hopefully allow us to kill the old ways at some point.
Future work: