mirror of
https://github.com/status-im/consul.git
synced 2025-02-27 21:00:44 +00:00
4ebbf2b788
This isn't used in OSS but CE needs it. It'll be easier to manage common deps in OSS and take them to CE.
45 lines
1.1 KiB
Go
45 lines
1.1 KiB
Go
package s3
|
|
|
|
import (
|
|
"crypto/md5"
|
|
"encoding/base64"
|
|
|
|
"github.com/aws/aws-sdk-go/aws/awserr"
|
|
"github.com/aws/aws-sdk-go/aws/awsutil"
|
|
"github.com/aws/aws-sdk-go/aws/request"
|
|
)
|
|
|
|
var errSSERequiresSSL = awserr.New("ConfigError", "cannot send SSE keys over HTTP.", nil)
|
|
|
|
func validateSSERequiresSSL(r *request.Request) {
|
|
if r.HTTPRequest.URL.Scheme != "https" {
|
|
p, _ := awsutil.ValuesAtPath(r.Params, "SSECustomerKey||CopySourceSSECustomerKey")
|
|
if len(p) > 0 {
|
|
r.Error = errSSERequiresSSL
|
|
}
|
|
}
|
|
}
|
|
|
|
func computeSSEKeys(r *request.Request) {
|
|
headers := []string{
|
|
"x-amz-server-side-encryption-customer-key",
|
|
"x-amz-copy-source-server-side-encryption-customer-key",
|
|
}
|
|
|
|
for _, h := range headers {
|
|
md5h := h + "-md5"
|
|
if key := r.HTTPRequest.Header.Get(h); key != "" {
|
|
// Base64-encode the value
|
|
b64v := base64.StdEncoding.EncodeToString([]byte(key))
|
|
r.HTTPRequest.Header.Set(h, b64v)
|
|
|
|
// Add MD5 if it wasn't computed
|
|
if r.HTTPRequest.Header.Get(md5h) == "" {
|
|
sum := md5.Sum([]byte(key))
|
|
b64sum := base64.StdEncoding.EncodeToString(sum[:])
|
|
r.HTTPRequest.Header.Set(md5h, b64sum)
|
|
}
|
|
}
|
|
}
|
|
}
|