Rotate the Hermes cookie key to a valid length #557

Merged
binjovi-bot merged 1 commit from fix/hermes-cookie-secret into trunk 2026-09-10 11:30:45 +00:00
Owner

oauth2-proxy rejects the enrolled 44-character encoded cookie key. Rotate only that SOPS-encrypted value to a 32-character raw key, which satisfies its AES key requirement. No plaintext secret is committed.

Validation: decrypted length assertion passed locally; bash tests/hermes-contract.sh passed.

oauth2-proxy rejects the enrolled 44-character encoded cookie key. Rotate only that SOPS-encrypted value to a 32-character raw key, which satisfies its AES key requirement. No plaintext secret is committed. Validation: decrypted length assertion passed locally; `bash tests/hermes-contract.sh` passed.
fix: rotate Hermes cookie key to a valid length
All checks were successful
binjovi/ci Binjovi completed the frozen plan
1900bb896e
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/seanfarm!557
No description provided.