1
0
mirror of https://github.com/smallstep/cli.git synced 2025-08-07 16:02:54 +03:00

Upgrade go-pkcs12 and use modern encoders

This PR upgrades go-pkcs12 and switches the default encoder to a modern
version PBES2 with PBKDF2-HMAC-SHA-256 and AES-256-CBC. It also adds
a legacy flag to use the previous version.

This PR also fixes some linter issues.

Fixes #1061
This commit is contained in:
Mariano Cano
2023-11-28 17:58:48 -08:00
parent 7683b8725f
commit 0b51ad0f70
6 changed files with 33 additions and 15 deletions

View File

@@ -44,10 +44,12 @@ import (
// Google is also distributing the client ID and secret on the cloud SDK
// available here https://cloud.google.com/sdk/docs/quickstarts
const (
//nolint:gosec // This is a client meant for open source testing. The client has no security access or roles.
defaultClientID = "1087160488420-8qt7bavg3qesdhs6it824mhnfgcfe8il.apps.googleusercontent.com"
//nolint:gosec // This is a client meant for open source testing. The client has no security access or roles.
defaultClientNotSoSecret = "udTrOT3gzrO7W9fDPgZQLfYJ"
//nolint:gosec // This is a client meant for open source testing. The client has no security access or roles.
defaultDeviceAuthzClientID = "1087160488420-1u0jqoulmv3mfomfh6fhkfs4vk4bdjih.apps.googleusercontent.com"
//nolint:gosec // This is a client meant for open source testing. The client has no security access or roles.
defaultDeviceAuthzClientNotSoSecret = "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"