engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

encryption: added new backend using cryptography + Fernet encryption.

Browse source 
- This would soon replace the old deprecated one based on pycrypto
- We need a migration for the encryption data
This commit is contained in:
Marcin Kuzminski 2019-02-26 13:18:24 +01:00
parent 57f02c191a
commit 823c59c011
6 changed files with 194 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

5
configs/development.ini
View file

@ -133,6 +133,11 @@ rhodecode.api.url = /_admin/api
## `SignatureVerificationError` in case of wrong key, or damaged encryption data.
#rhodecode.encrypted_values.strict = false
## Pick algorithm for encryption. Either fernet (more secure) or aes (default)
## fernet is safer, and we strongly recommend switching to it.
## Due to backward compatibility aes is used as default.
#rhodecode.encrypted_values.algorithm = fernet
## return gzipped responses from RhodeCode (static files/application)
gzip_responses = false

5
configs/production.ini
View file

@ -108,6 +108,11 @@ use = egg:rhodecode-enterprise-ce
## `SignatureVerificationError` in case of wrong key, or damaged encryption data.
#rhodecode.encrypted_values.strict = false
## Pick algorithm for encryption. Either fernet (more secure) or aes (default)
## fernet is safer, and we strongly recommend switching to it.
## Due to backward compatibility aes is used as default.
#rhodecode.encrypted_values.algorithm = fernet
## return gzipped responses from RhodeCode (static files/application)
gzip_responses = false