Artifact Encryption plug point (#1202)
* added ArtifactEncryption interface, injected it into SM creation UI module, added encryption metadata key generation upon SM creation, used encryptor during file upload
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
* add default artifact encryption implementation based on gcm aes algorithm
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
* changed ArtifactEncryptor interface to manage encryption secrets by itself
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
* cleaned up stale code, fixed sonar
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
* fixed software module encryption within transaction
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
* added artifact encryption secrets store
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
* extended ArtifactEncryption interface to allow decryption, secrets store provides removeSecret, added missing javadocs
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
* intriduced DbArtifact interface, use EncryptionAwareDbArtifact for artifact decryption during download
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
* introduced ArtifactEncryptionService to minimize duplications and unneccessary dependency injections
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
* declared ArtifactEncryptionService as a bean
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
* added persistant encryption flag to software module
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
* further adptations for encryption flag persistence
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
* added ArtifactEncryptionException, fixed encryption check in UI
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
* added encryption error handling
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
* added encrypted flag to DDI/DMF, adapted exception handling
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
* adapted rest docs
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
* Add test to verify artifact encryption is not given by default
Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>
* Add isEncrypted() to toString() of JpaSoftwareModule, fix typos
Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>
* Fix sql migration scripts
Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>
* Calculate encrypted artifact size by subtract encryption size overhead
Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>
* publish upload failed without waiting for interuption during UI file upload
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
* upgraded cron utils to 9.1.6
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
Co-authored-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>
146735012a