On Чцв, 19 сне 2024, Yuriy Halytskyy wrote:
Went into that rabbit hole... The following seems to work ( user
vault, standard type):
1. Obtain vault config via vaultconfig_show/1. It will give me the
transport key and all the supported wrapping algorithms.
2. Focusing on aes-128-cbc first. Gener
Went into that rabbit hole... The following seems to work ( user
vault, standard type):
1. Obtain vault config via vaultconfig_show/1. It will give me the
transport key and all the supported wrapping algorithms.
2. Focusing on aes-128-cbc first. Generate 16 byte session key,
encrypt it with trans
On Срд, 18 сне 2024, Yuriy Halytskyy via FreeIPA-users wrote:
Hi,
I am trying to retrieve user vault contents using api. Based on "ipa
vault-retrieve" command trace it looks like I need to use
vault_retrieve_internal/1 call and pass it a session key encrypted
with KRA transport public key. Where
