Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

encryptedAPKAMSymmetric key is missed when the pending enrollments are fetched. #1821

Closed
sitaram-kalluri opened this issue Feb 27, 2024 · 1 comment · Fixed by #1824
Closed
Assignees

Comments

@sitaram-kalluri
Copy link
Member

sitaram-kalluri commented Feb 27, 2024

Describe the bug:

  • When a new app request for enrollment and the existing app receives the notification but doesn't take any action and goes offline.
  • At this point, when the existing app is restarted and pending enrollments are fetched from the secondary server, the response contains "appName", "deviceName" and "namespaces". The response does not include "encryptedAPKAMSymmetricKey"

To approve an enrollment the encryptedAPKAMSymmetricKey is needed to encrypt the default encryption private key and default self encryption key and send them to server. But the enrollments that are fetched using "enroll:list" does not contain the encryptedAPKAMSymmetricKey.

Steps to reproduce

The enroll:list command does not have encryptedAPKAMSymmetricKey because of which pending enrollment cannot be approved by the approving apps.

Solution

Currently, the encryptedAPKAMSymmetricKey is not encapsulated in the EnrollDataStoreValue class which is used to store the enrollment params in the secondary server.

To fix the issue, include encryptedAPKAMSymmetricKey in the EnrollDataStoreValue and persist in the secondary server. When notify, fetch the value and notify along with the other enrollment params.

@sitaram-kalluri
Copy link
Member Author

The changes are merged to trunk and release into canary in version 3.0.40a. Hence closing this git issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant