Rotate the Hermes cookie key to a valid length #557
Loading…
Reference in a new issue
No description provided.
Delete branch "fix/hermes-cookie-secret"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
oauth2-proxy rejects the enrolled 44-character encoded cookie key. Rotate only that SOPS-encrypted value to a 32-character raw key, which satisfies its AES key requirement. No plaintext secret is committed.
Validation: decrypted length assertion passed locally;
bash tests/hermes-contract.shpassed.