Skip to content

Commit 8b561d2

Browse files
author
Lee Fine
committed
2 parents 3a145cb + 51f7b74 commit 8b561d2

File tree

3 files changed

+13
-5
lines changed

3 files changed

+13
-5
lines changed

CHANGELOG.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
v2.9.1
1+
v2.9.1
22
- Bug Fix: Use AES encryption when creating PKCS12 files instead of less secure defaults
33

44
v2.9.0

README.md

Lines changed: 11 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -50,12 +50,15 @@ Please refer to the READMEs for each supported store type for more information o
5050
|-----|-----|------|
5151
|Orchestrated Server hosting certificate store(s) on remote Windows server|WinRM connection | SSH connection |
5252
|Orchestrated Server hosting certificate store(s) on remote Linux server| SSH connection | SSH connection |
53-
|Certificate store(s) on same server as orchestrator service (Agent)| WinRM connection or local file system | SSH connection or local file system |
53+
|Certificate store(s) on same server as orchestrator service (Agent)| WinRM connection or local file system | SSH connection or local file system |
54+
55+
Note: when creating, adding certificates to, or removing certificates from any store managed by RemoteFile, the destination store file will be recreated. When this occurs current AES encryption algorithms will be used for affected certificates and certificate store files.
5456

5557
The Remote File Universal Orchestrator extension implements 6 Certificate Store Types. Depending on your use case, you may elect to use one, or all of these Certificate Store Types. Descriptions of each are provided below.
5658

5759
<details><summary>RFJKS (RFJKS)</summary>
5860

61+
5962
### RFJKS
6063

6164
The RFJKS store type can be used to manage java keystores of types JKS or PKCS12. If creating a new java keystore and adding a certificate all via Keyfactor Command, the created java keystore will be of type PKCS12, as java keystores of type JKS have been deprecated as of JDK 9.
@@ -68,6 +71,7 @@ Use cases supported:
6871

6972
<details><summary>RFPEM (RFPEM)</summary>
7073

74+
7175
### RFPEM
7276

7377
The RFPEM store type can be used to manage PEM encoded files.
@@ -84,6 +88,7 @@ NOTE: PEM stores may only have one private key (internal or external) associated
8488

8589
<details><summary>RFPkcs12 (RFPkcs12)</summary>
8690

91+
8792
### RFPkcs12
8893

8994
The RFPkcs12 store type can be used to manage any PKCS#12 compliant file format INCLUDING java keystores of type PKCS12.
@@ -101,6 +106,7 @@ Use cases not supported:
101106

102107
<details><summary>RFDER (RFDER)</summary>
103108

109+
104110
### RFDER
105111

106112
The RFDER store type can be used to manage DER encoded files.
@@ -112,6 +118,7 @@ Use cases supported:
112118

113119
<details><summary>RFKDB (RFKDB)</summary>
114120

121+
115122
### RFKDB
116123

117124
The RFKDB store type can be used to manage IBM Key Database Files (KDB) files. The IBM utility, GSKCAPICMD, is used to read and write certificates from and to the target store and is therefore required to be installed on the server where each KDB certificate store being managed resides, and its location MUST be in the system $Path.
@@ -124,6 +131,7 @@ Use cases supported:
124131

125132
<details><summary>RFORA (RFORA)</summary>
126133

134+
127135
### RFORA
128136

129137
The RFORA store type can be used to manage Pkcs12 Oracle Wallets. Please note that while this should work for Pkcs12 Oracle Wallets installed on both Windows and Linux servers, this has only been tested on wallets installed on Windows. Please note, when entering the Store Path for an Oracle Wallet in Keyfactor Command, make sure to INCLUDE the eWallet.p12 file name that by convention is the name of the Pkcs12 wallet file that gets created.
@@ -610,7 +618,7 @@ The Remote File Universal Orchestrator extension implements 6 Certificate Store
610618
| --------- | ----------- | ----------- | ----------- |
611619
| Older than `11.0.0` | | | `net6.0` |
612620
| Between `11.0.0` and `11.5.1` (inclusive) | `net6.0` | | `net6.0` |
613-
| Between `11.0.0` and `11.5.1` (inclusive) | `net8.0` | `Never` | `net6.0` |
621+
| Between `11.0.0` and `11.5.1` (inclusive) | `net8.0` | `Disable` | `net6.0` |
614622
| Between `11.0.0` and `11.5.1` (inclusive) | `net8.0` | `LatestMajor` | `net8.0` |
615623
| `11.6` _and_ newer | `net8.0` | | `net8.0` |
616624

@@ -1410,7 +1418,7 @@ If running as an agent (accessing stores on the server where the Universal Orche
14101418
14111419
## Developer Notes
14121420
1413-
The Remote File Orchestrator Extension is meant to be extended to be used for other file based certificate store types than the ones referenced above. The advantage to extending this integration rather than creating a new one is that the configuration, remoting, and Inventory/Management/Discovery logic is already written. The developer needs to only implement a few classes and write code to convert the destired file based store to a common format. This section describes the steps necessary to add additional store/file types. Please note that familiarity with the [.Net Core BouncyCastle cryptography library](https://github.com/bcgit/bc-csharp) is a prerequisite for adding additional supported file/store types.
1421+
The Remote File Orchestrator Extension is designed to be highly extensible, enabling its use with various file-based certificate stores beyond the specific implementations currently referenced above. The advantage to extending this integration rather than creating a new one is that the configuration, remoting, and Inventory/Management/Discovery logic is already written. The developer needs to only implement a few classes and write code to convert the destired file based store to a common format. This section describes the steps necessary to add additional store/file types. Please note that familiarity with the [.Net Core BouncyCastle cryptography library](https://github.com/bcgit/bc-csharp) is a prerequisite for adding additional supported file/store types.
14141422
14151423
Steps to create a new supported file based certificate store type:
14161424

integration-manifest.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -540,4 +540,4 @@
540540
]
541541
}
542542
}
543-
}
543+
}

0 commit comments

Comments
 (0)