awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-06 13:27:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update hsm-service.ts

Browse Source
This commit is contained in:
Daniel Hougaard
2024-11-11 21:47:07 +04:00
parent 7c055f71f7
commit a1474145ae
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/ee/services/hsm/hsm-service.ts
+3 -3
View File
@@ -301,7 +301,7 @@ export const hsmServiceFactory = ({ hsmModule: { isInitialized, pkcs11 } }: THsm
pkcs11.C_VerifyFinal(sessionHandle, hmac); pkcs11.C_VerifyFinal(sessionHandle, hmac);
} catch (error) { } catch (error) {
logger.error(error, "HSM: HMAC verification failed"); logger.error(error, "HSM: HMAC verification failed");
throw new Error("Decryption failed"); // Generic error for failed verification throw new Error("HSM: Decryption failed"); // Generic error for failed verification
} }
// Only decrypt if verification passed // Only decrypt if verification passed
@@ -318,8 +318,8 @@ export const hsmServiceFactory = ({ hsmModule: { isInitialized, pkcs11 } }: THsm
// Create a new buffer from the decrypted data // Create a new buffer from the decrypted data
return Buffer.from(decryptedData); return Buffer.from(decryptedData);
} catch (error) { } catch (error) {
logger.error("Decryption error:", error); logger.error(error, "HSM: Failed to perform decryption");
throw new Error(`Decryption failed: ${(error as Error)?.message}`); throw new Error("HSM: Decryption failed"); // Generic error for failed decryption, to avoid leaking details about why it failed (such as padding related errors)
} }
}; };