oxidecomputer / oxidecomputer/omicron

Consider changing database certificate storage type

Open
#5,918 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

database
Dominant language
Rust
Stars
572
Forks
97
Avg merge
2d 12h
Merged PRs (30d)
96

Description

Certificates are currently accepted and returned as PEM encoded strings, but in the database we store them as bytes. If we are always going to used a string based format, we may want to change our database representation. Though if we intend to accept other formats and serialize an enum of types to a binary form we may not want to change this.

https://github.com/oxidecomputer/omicron/blob/7fb6cb47c7b194b7088744ede0572d5e5be703a6/schema/crdb/dbinit.sql#L397-L401

Reference: https://github.com/oxidecomputer/omicron/pull/5078

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with schema/crdb/dbinit.sql lines 397-401 and read the referenced pull request #5078. Determine whether certificates will remain PEM-only or need multiple formats; done means resolving that design and updating the database representation consistently.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
databases
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.