GoogleCloudPlatform / GoogleCloudPlatform/kms-integrations

CryptoKeyVersion resource names (CKA_IDs) longer than 100 characters are rejected by OpenSSL

Open
#35 3 comments 0 reactions 0 assignees View on GitHub
known issue v2 candidate
Dominant language
C++
Stars
47
Forks
24
PR merge metrics
No merged PRs in 30d

Description

I ran into the 100 character limit while trying to set up support for key rotation in my project and banged my head against the wall before finding the reason in the documentation. My understanding is that it looks like like the underlying cause is in the libp11 library but it's not entirely clear what is going on and there hasn't been any movement on getting it fixed.

Is there any chance this could be solved in this library somehow? Maybe by using a cryptoKey instead of a keyring as the slot or something.

In the short term I think I will need to create a new key with a shorter name to meet deadlines but I think anything that GCP supports should also be supported in this library one way or another.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.