awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-07 16:27:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: public key encoding as DER

Browse Source
This commit is contained in:
Daniel Hougaard
2025-04-04 11:08:06 +04:00
parent cd83efb060
commit 83206aad93
2 changed files with 13 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/services/cmek/cmek-service.ts
+3 -1
View File
@@ -302,7 +302,9 @@ export const cmekServiceFactory = ({ kmsService, kmsDAL, permissionService, proj
const publicKey = await kmsService.getPublicKey({ kmsId: keyId }); const publicKey = await kmsService.getPublicKey({ kmsId: keyId });
return { publicKey, projectId: key.projectId }; const base64EncodedPublicKey = publicKey.toString("base64");
return { publicKey: base64EncodedPublicKey, projectId: key.projectId };
}; };
const cmekSign = async ({ keyId, data, signingAlgorithm }: TCmekSignDTO, actor: OrgServiceActor) => { const cmekSign = async ({ keyId, data, signingAlgorithm }: TCmekSignDTO, actor: OrgServiceActor) => {
backend/src/services/kms/kms-service.ts
+10 -7
View File
@@ -454,13 +454,16 @@ export const kmsServiceFactory = ({
const publicKeyBuffer = signingService(encryptionAlgorithm).getPublicKeyFromPrivateKey(kmsKey); const publicKeyBuffer = signingService(encryptionAlgorithm).getPublicKeyFromPrivateKey(kmsKey);
return crypto return (
.createPublicKey({ crypto
key: publicKeyBuffer, .createPublicKey({
format: "pem", key: publicKeyBuffer,
type: "spki" format: "pem",
}) type: "spki"
.export({ type: "spki", format: "pem" }) as string; // format 'pem' makes it a string })
// We return as a DER encoded X.509 certificate (https://datatracker.ietf.org/doc/html/rfc5280)
.export({ type: "spki", format: "der" })
);
}; };
const signWithKmsKey = async ({ kmsId }: Pick<TSignWithKmsDTO, "kmsId">) => { const signWithKmsKey = async ({ kmsId }: Pick<TSignWithKmsDTO, "kmsId">) => {