tarantool / go-tarantool

79%

master: 74%

LAST BUILD ON BRANCH DifferentialOrange/ssl-key-decryption

branch: DifferentialOrange/ssl-key-decryption

CHANGE BRANCH

x

Reset

• DifferentialOrange/ssl-key-decryption
• 0x501D/ci-use-tt
• AnaNek/gh-101-interactive-transactions
• AnaNek/gh-108-alternative-crud-api
• AnaNek/gh-108-crud-api
• AnaNek/gh-125-rename-default-call
• AnaNek/master-discovery
• DerekBum-gh-136-add-context-to-connection-create
• DerekBum/gh-237-ability-to-mock-connections
• DerekBum/gh-301-disable-ssl-by-default
• DerekBum/gh-301-remove-ssl
• DerekBum/gh-337-support-iproto-watch-once
• DerekBum/gh-338-support-space-and-index-names
• DerekBum/gh-348-fix-splice-update-operation
• DerekBum/gh-378-bump-go-version
• DerekBum/gh-380-get-status-from-watch-once
• DerekBum/gh-7-connection-schema-getter
• DifferentialOrange/crud-improvements
• DifferentialOrange/fix-readme-go-1.13
• DifferentialOrange/gh-120-iproto-id
• DifferentialOrange/gh-209-error-type
• DifferentialOrange/gh-214-graceful-shutdown
• DifferentialOrange/gh-214-graceful-shutdown-v2
• DifferentialOrange/gh-215-session-settings
• DifferentialOrange/gh-342-float-timeout
• DifferentialOrange/no-gh-crud-schema
• DifferentialOrange/no-gh-crud-schema-opts
• DifferentialOrange/no-gh-crud-yield-every
• Totktonada/remove-trailing-whilespaces
• add-box-info-replication
• askalt/gh-321-socket-fd
• askalt/gh-330-support-operation-data
• better0fdead/flaky-macOS
• better0fdead/gh-157-macos
• better0fdead/no-gh-svacer
• box/schema
• discovering
• dmyger/gh-399-add-support-IPROTO_INSERT_ARROW
• dmyger/gh-412-api-update-Arrow-constants-with-iproto
• dmyger/gh-no_update_test_helpers
• feature/box
• fix-typo
• get-instances
• gh-67-iproto-push-support
• grafin/is_nullable_test
• i-cod/bump-action-version
• install_crud_master
• ligurio/better-code-coverage
• ligurio/code-coverage
• ligurio/documentation-fixes
• ligurio/fix-coverage
• ligurio/gh-118-datetime-support
• ligurio/gh-121-release-process
• ligurio/gh-123-documentation
• ligurio/gh-142-workflow
• ligurio/gh-96-decimal-support
• ligurio/gofmt
• ligurio/review-checklist
• locker/queue-identify-arg-fix
• logo
• master
• more-info
• nshi/fix-compare-box-errors-invocation
• nshi/fix-error-payload-tests
• nshi/fix-error-payload-tests-more
• oleg-jukovec/1.10-support
• oleg-jukovec/2.10-workaround-delete
• oleg-jukovec/bump-go-iproto
• oleg-jukovec/ci-tnt-1.6
• oleg-jukovec/connect-validation-helper
• oleg-jukovec/connection-dialer
• oleg-jukovec/connection_pool_fixes
• oleg-jukovec/contibuting-update
• oleg-jukovec/crud-conditions-fix
• oleg-jukovec/datetime-interval-offsets
• oleg-jukovec/datetime-non-fixed
• oleg-jukovec/decimal-fix
• oleg-jukovec/fix-centos7-build
• oleg-jukovec/fix-ci
• oleg-jukovec/fix-decimal-export
• oleg-jukovec/fix-ee-tests-ref
• oleg-jukovec/fix-flaky-closegraceful
• oleg-jukovec/fix-flaky-pool-test
• oleg-jukovec/fix-flaky-queue-pool
• oleg-jukovec/fix-master-cache
• oleg-jukovec/fix-seq-scan
• oleg-jukovec/flaky-decimal-testselect
• oleg-jukovec/forks-disable-ee
• oleg-jukovec/gettyped-after-get
• oleg-jukovec/gh-119-watchers-support
• oleg-jukovec/gh-124-msgpack-v5
• oleg-jukovec/gh-126-request-object-select
• oleg-jukovec/gh-129-unexpected
• oleg-jukovec/gh-155-ssl-support
• oleg-jukovec/gh-163-datetime-tz
• oleg-jukovec/gh-165-interval-support
• oleg-jukovec/gh-176-queue-loves-pool
• oleg-jukovec/gh-177-add-queue-missing
• oleg-jukovec/gh-178-connection-pool-callbacks
• oleg-jukovec/gh-191-fix-datetime-range
• oleg-jukovec/gh-196-get-typed-examples
• oleg-jukovec/gh-201-fix-decimal-godoc
• oleg-jukovec/gh-218-schema-data-race
• oleg-jukovec/gh-223-invalid-streamid
• oleg-jukovec/gh-231-golint-ci-output
• oleg-jukovec/gh-234-flaky-multi-TestDisconnectAll
• oleg-jukovec/gh-238-immutable
• oleg-jukovec/gh-241-deprecated
• oleg-jukovec/gh-243-pap-sha256
• oleg-jukovec/gh-244-fix-flaky-withcontext
• oleg-jukovec/gh-246-pagination
• oleg-jukovec/gh-257-graceful-close
• oleg-jukovec/gh-260-fix-M1-build
• oleg-jukovec/gh-271-crud-improvments
• oleg-jukovec/gh-272-pool-reconnect-bug
• oleg-jukovec/gh-284-fix-newwatcher
• oleg-jukovec/gh-288-fix-flaky-crud
• oleg-jukovec/gh-290-pool-add-remove
• oleg-jukovec/gh-293-replicaset-uuid
• oleg-jukovec/gh-309-round-robin-race
• oleg-jukovec/gh-320-fix-after
• oleg-jukovec/gh-321-fix-after
• oleg-jukovec/gh-322-fix-after
• oleg-jukovec/gh-324-deprecate-session-push
• oleg-jukovec/gh-356-pool-connect-update-interface
• oleg-jukovec/gh-357-fix-ssl-diable-build
• oleg-jukovec/gh-365-crud-typed-batches
• oleg-jukovec/gh-372-pool-connect-improve
• oleg-jukovec/gh-376-pool-do-by-name
• oleg-jukovec/gh-415-fix-arrow-error
• oleg-jukovec/gh-no-do-not-reload-schema
• oleg-jukovec/gh-no-sql-case-sensitive
• oleg-jukovec/gofmt-1.19
• oleg-jukovec/golangci-lint-goimports
• oleg-jukovec/linters
• oleg-jukovec/merge-close
• oleg-jukovec/only-do-request
• oleg-jukovec/pool-remove-does-not-call-deactivated
• oleg-jukovec/race-condition-fixes
• oleg-jukovec/release-1.10.0
• oleg-jukovec/release-1.11.0
• oleg-jukovec/release-1.12.0
• oleg-jukovec/release-1.12.1
• oleg-jukovec/release-1.12.2
• oleg-jukovec/release-1.6.0
• oleg-jukovec/release-1.7.0
• oleg-jukovec/release-1.8.0
• oleg-jukovec/release-1.9.0
• oleg-jukovec/release-2.0.0
• oleg-jukovec/release-2.1.0
• oleg-jukovec/release-v2.2.0
• oleg-jukovec/release-v2.2.1
• oleg-jukovec/remove-NewErrorFuture
• oleg-jukovec/remove-future-err
• oleg-jukovec/test-go-openssl
• oleg-jukovec/usage-test-func
• oleg-jukovec/v2
• oleg-jukovec/version-helper-output
• psergee/no-gh-test-branch
• refs/tags/v1.10.0
• refs/tags/v1.11.0
• refs/tags/v1.12.0
• refs/tags/v1.12.1
• refs/tags/v1.12.2
• refs/tags/v1.6.0
• refs/tags/v1.7.0
• refs/tags/v1.8.0
• refs/tags/v1.9.0
• refs/tags/v2.0.0
• refs/tags/v2.1.0
• refs/tags/v2.2.0
• refs/tags/v2.2.1
• release/1.12
• v2_WIP
• vr009/fix-typo
• vr009/gh-117-add-prepared-statements
• vr009/gh-122-add-perf-tests
• vr009/gh-142-fix-lint-warnings
• vr009/gh-48-add-context-support
• vr009/gh-62-minimal-sql-support
• ylobankov/bump-actions-version

Build # 5749741645

Build Type

push

github

Committed by DifferentialOrange

Commit Message

api: support SSL private key file decryption

Support `ssl_password` and `ssl_password_file` options in SslOpts.
Tarantool EE supports SSL passwords and password files since 2.11.0 [1].
Since it is possible to use corresponding non-encrypted key, cert and CA
on server, tests works fine even for Tarantool EE 2.10.0.

Same as in Tarantool, we try `SslOpts.Password`, then each line in
`SslOpts.PasswordFile`. If all of the above fail, we re-raise errors.

If the key is encrypted and password is not provided,
`openssl.LoadPrivateKeyFromPEM(keyBytes)` asks to enter PEM pass phrase
interactively. On the other hand,
`openssl.LoadPrivateKeyFromPEMWithPassword(keyBytes, password)` works
fine for non-encrypted key with any password, including empty string.
If the key is encrypted, we fast fail with password error instead of
requesting the pass phrase interactively.

The patch also bumps go-openssl since latest patch fixes flaky
tests [2].

The patch is based on a similar patch for tarantool-python [3].

1. https://github.com/tarantool/tarantool-ee/issues/22
2. https://github.com/tarantool/go-openssl/pull/9
3. https://github.com/tarantool/tarantool-python/pull/274

Run Details

28 of 28 new or added lines in 1 file covered. (100.0%)

5320 of 6702 relevant lines covered (79.38%)

7995.09 hits per line