fix(kms): harden local master key storage (#3589)

This commit is contained in:
houseme
2026-06-19 08:50:35 +08:00
committed by GitHub
parent 2c6881695f
commit 53ff19dd2d
4 changed files with 247 additions and 51 deletions
+1 -1
View File
@@ -157,7 +157,7 @@ impl fmt::Debug for BackendConfig {
pub struct LocalConfig {
/// Directory to store key files
pub key_dir: PathBuf,
/// Master key for encrypting stored keys (if None, keys are stored in plaintext)
/// Master key for encrypting stored keys (if None, only explicit development-mode plaintext storage is allowed)
pub master_key: Option<String>,
/// File permissions for key files (octal)
pub file_permissions: Option<u32>,