DockerCLI/cli/context
Sebastiaan van Stijn 8437cfefae
context: deprecate support for encrypted TLS private keys
> Legacy PEM encryption as specified in RFC 1423 is insecure by design. Since
> it does not authenticate the ciphertext, it is vulnerable to padding oracle
> attacks that can let an attacker recover the plaintext

From https://go-review.googlesource.com/c/go/+/264159

> It's unfortunate that we don't implement PKCS#8 encryption so we can't
> recommend an alternative but PEM encryption is so broken that it's worth
> deprecating outright.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit 15535d4594)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2021-07-28 15:48:11 +02:00
..
docker context: deprecate support for encrypted TLS private keys 2021-07-28 15:48:11 +02:00
kubernetes bump gotest.tools v3.0.1 for compatibility with Go 1.14 2020-02-23 00:28:55 +01:00
store context: Ensure context name is valid on import 2021-01-28 22:27:59 +00:00
endpoint.go Fast Context Switch: commands 2019-01-10 22:25:43 +01:00
tlsdata.go Cleanup context store interfaces 2019-04-18 15:49:36 +02:00