Skip to content

Encryption workflow changes and logging enhancements

Steve Laskaridis requested to merge slaskari/CASTOR:encryption_workflow_changes into master

Description

This particular merge request introduces the following changes:

  • VMGR tag gets updated on write sessions only (--set-tag parameter on encryption script)
  • An empty key string means "no encryption"
  • Better error logging
  • Secure CASTOR from invalid encryption script JSON response

Testing

  • Spawn failure (file not found, no execute permission)
  • Random script output (JSON missing fields, not valid JSON)
  • I/O Unencrypted (with dd file verification)
  • I/O Encrypted (with dd file verification)

Merge request reports