We joyfully announce the release of:
castellan 1.2.1: Generic Key Manager interface for OpenStack
This release is part of the stein release series.
The source is available from:
https://git.openstack.org/cgit/openstack/castellan
Download the package from:
https://tarballs.openstack.org/castellan/
Please report issues through launchpad:
https://bugs.launchpad.net/castellan
For more details, please see below.
1.2.1 ^^^^^
Bug Fixes
* Fixed VaultKeyManager.create_key() to consider the *length* param as bits instead of bytes for the key length. This was causing a discrepancy between keys generated by the HashiCorp Vault backend and the OpenStack Barbican backend. Considering *km* as an instance of a key manager, the following code *km.create_key(ctx, "AES", 256)* was generating a 256 bit AES key when Barbican is configured as the backend, but generating a 2048 bit AES key when Vault was configured as the backend.
Changes in castellan 1.2.0..1.2.1 ---------------------------------
9ecd300 Fix length usage in VaultKeyManager.create_key. a4efb7d add python 3.7 unit test job
Diffstat (except docs and test files) -------------------------------------
.zuul.yaml | 1 + castellan/key_manager/vault_key_manager.py | 9 +++++++-- releasenotes/notes/fix-vault-create-key-b4340a3067cbd93c.yaml | 10 ++++++++++ 3 files changed, 18 insertions(+), 2 deletions(-)