Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Switch from openpgp to node crypto #27377

Open
viceice opened this issue Feb 17, 2024 · 2 comments
Open

Switch from openpgp to node crypto #27377

viceice opened this issue Feb 17, 2024 · 2 comments
Assignees
@viceice @rarkins
Labels
core:config Related to config capabilities and presets priority-3-medium Default priority, "should be done" but isn't prioritised ahead of others type:feature Feature (new functionality)

Comments

@viceice
Copy link
Member

viceice commented Feb 17, 2024

Describe the proposed change(s).

We planned already to drop openpgp because of license issue.
Now with latest node version the default encryption is broken.

We should switch do a more modern build-in encryption.
Eg: ECDH asymetric key and derived AES-GCM key.

I'll soon add some code samples to renovate codebase
@viceice viceice added type:feature Feature (new functionality) priority-2-high Bugs impacting wide number of users or very important features core:config Related to config capabilities and presets labels Feb 17, 2024
@viceice viceice mentioned this issue Feb 19, 2024
Closed
10 tasks
@denis-rossati denis-rossati mentioned this issue Mar 11, 2024
Closed
@HonkingGoose
Copy link
Collaborator

Is this still a thing we want to do?

@viceice
Copy link
Member Author

viceice commented Jun 12, 2024

probably yes, but prio is reduced since we switched the pgp library

@rarkins rarkins added priority-3-medium Default priority, "should be done" but isn't prioritised ahead of others and removed priority-2-high Bugs impacting wide number of users or very important features labels Jun 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@viceice viceice

@rarkins rarkins

Labels
core:config Related to config capabilities and presets priority-3-medium Default priority, "should be done" but isn't prioritised ahead of others type:feature Feature (new functionality)
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

feat(config): support modern ECDH/AES-GCM encryption renovatebot/renovate
3 participants
@viceice @rarkins @HonkingGoose