C2022021 opened a new issue, #7989:
URL: https://github.com/apache/apisix/issues/7989

   ### Description
   
   OS: RHEL 8.6
   APISIX VERSION: 2.13.3
   APISIX DASHBOARD VERSION: 2.13.0
   
   I found `ssl` section in config-default.yaml has a `key_encrypt_salt` 
attribute, and comment of it said:
   \#  If not set, will save origin ssl key into etcd.
   \#  If set this, must be a string of length 16. And it will encrypt ssl key 
with AES-128-CBC
   \#  !!! So do not change it after saving your ssl, it can't decrypt the ssl 
keys have be saved if you change !!
   
   But, After I setting certificate and key through APISIX Dashboard, I still 
can get origin ssl key from etcd by command `etcdctl get --prefix 
"/apisix/ssl"` instead of encrypt string.
   I am confused that is the key encryption function has not imlpement for 
apisix version 2.13.3 on RHEL ? Or anything I had setting wrong in my config 
file?
   
   ### Environment
   
   - APISIX version (run `apisix version`):
   - Operating system (run `uname -a`):
   - OpenResty / Nginx version (run `openresty -V` or `nginx -V`):
   - etcd version, if relevant (run `curl 
http://127.0.0.1:9090/v1/server_info`):
   - APISIX Dashboard version, if relevant:
   - Plugin runner version, for issues related to plugin runners:
   - LuaRocks version, for installation issues (run `luarocks --version`):
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to