v0.24.9_hotfix2

This commit is contained in:
Mateusz Gruszczyński committed 2026-10-03 18:21:33 +02:00
1 parent cb6d98064b
commit d3f0f060bf
6 files changed
+16 -9

No files matched your search

+2 -2
View File
@@ -1,6 +1,6 @@
//! Central encrypted secret storage for provider/ACME credentials.
//! Plaintext exists only for the duration of an explicit read/write operation.
use anyhow::{bail, ensure, Context, Result};
use anyhow::{ensure, Context, Result};
use rand::{rngs::OsRng, RngCore};
use ring::aead::{Aad, LessSafeKey, Nonce, UnboundKey, AES_256_GCM};
use serde::Serialize;
@@ -170,7 +170,7 @@ pub async fn put(
.seal_in_place_append_tag(
Nonce::assume_unique_for_key(nonce),
Aad::from(aad(secret_id, provider)),
ciphertext.as_mut(),
&mut *ciphertext,
)
.map_err(|_| anyhow::anyhow!("secret encryption failed"))?;
let now = crate::auth::now();