hashicorp / hashicorp/consul

Encrypt sensitive data

Open
#15,883 0 comments 0 reactions 0 assignees View on GitHub
theme/security
Dominant language
Go
Stars
30.1k
Forks
4.6k
Avg merge
1d 18h
Merged PRs (30d)
39

Description

We noticed that there are already two issues about encryption of sensitive data, but there is no clear official solution yet.
One is https://github.com/hashicorp/consul/issues/10150 ,the another is https://github.com/hashicorp/consul/issues/8306

In summary:
1. in the data directory, the tokens on disk is unencrypted
2. the encryption key for Gossip placed in the configuration file is plain text
3. the private key file is plain text on disk

These sensitive data are not encrypted and stored, and there are security issues.
Do have any plans for the future?

Contributor guide

Open the contributing guide

Research direction

Review the two related issues, #10150 and #8306, alongside the stated storage locations: the data directory, the configuration file, and the private key file. Define the official encryption scope and acceptance criteria for protecting each sensitive value before implementation; this issue does not identify source files or tests.

Written by the indexing model from the issue text.

Assessment

Domain
infrastructure, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.