Kasper Timm Hansen
0338c81dc2
Reorder first secrets edit flow.
...
Setup config/secrets.yml.enc with template contents for people to edit.
Then generate encryption key and encrypt the initial secrets.
2017-05-25 15:56:55 +02:00
yuuji.yaginuma
827bfe4f41
Use the config value directly when call secrets
...
Currently, `read_encrypted_secrets` is set with initializer.
Therefore if refer to `secrets` in config, `read_encrypted_secrets` is false,
so can not get the value of `secrets.yml.enc`.
In order to be able to refer to secrets in config, modified to refer to
`config.read_encrypted_secrets` when calling `secrets`.
Fixes #28618 .
2017-04-16 09:35:45 +09:00
Kasper Timm Hansen
d22f879691
Inline CIPHER constant.
2017-03-02 19:38:42 +01:00
Kasper Timm Hansen
e3b4554f23
Move key packing into encryptor.
2017-03-02 19:38:01 +01:00
Kasper Timm Hansen
f2eb3417f2
Add back yaml require.
2017-03-02 19:28:54 +01:00
Stephen Touset
6aa6f9ae44
Default Secrets to AES-128-GCM, using ActiveSupport::MessageEncryptor
...
Fixes #28135 .
2017-03-01 14:54:34 -08:00
Kasper Timm Hansen
fbee4e3ce3
Revert "Revert "Add encrypted secrets""
2017-02-23 18:15:28 +01:00
David Heinemeier Hansson
039380e3ee
Revert "Add encrypted secrets" ( #28127 )
2017-02-23 15:55:15 +01:00
Kasper Timm Hansen
1166094569
Add encrypted secrets ( #28038 )
2017-02-23 15:01:02 +01:00
