From fa165522e5335e19df4c8472bbf86e3f9a895fc7 Mon Sep 17 00:00:00 2001 From: florian Date: Thu, 31 Aug 2023 06:36:05 +0200 Subject: [PATCH] ci/cd - use same md for openssl commands --- .github/workflows/staging-create-infra.yml | 2 +- .github/workflows/staging-delete-infra.yml | 2 +- .github/workflows/staging-tests.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/staging-create-infra.yml b/.github/workflows/staging-create-infra.yml index 963023d19..1b698abb8 100644 --- a/.github/workflows/staging-create-infra.yml +++ b/.github/workflows/staging-create-infra.yml @@ -46,7 +46,7 @@ jobs: - run: | tar -cf terraform.tar /tmp/${{ inputs.TYPE }} echo "$SECRET_KEY" > /tmp/.secret_key - openssl enc -in terraform.tar -aes-256-cbc -pbkdf2 -iter 100000 -pass file:/tmp/.secret_key -out terraform.tar.enc + openssl enc -in terraform.tar -aes-256-cbc -pbkdf2 -iter 100000 -md sha256 -pass file:/tmp/.secret_key -out terraform.tar.enc rm -f /tmp/.secret_key if: always() env: diff --git a/.github/workflows/staging-delete-infra.yml b/.github/workflows/staging-delete-infra.yml index 97646807e..6032a7426 100644 --- a/.github/workflows/staging-delete-infra.yml +++ b/.github/workflows/staging-delete-infra.yml @@ -27,7 +27,7 @@ jobs: path: /tmp - run: | echo "$SECRET_KEY" > /tmp/.secret_key - openssl enc -d -in /tmp/terraform.tar.enc -aes-256-cbc -pbkdf2 -iter 100000 -pass file:/tmp/.secret_key -out /tmp/terraform.tar + openssl enc -d -in /tmp/terraform.tar.enc -aes-256-cbc -pbkdf2 -iter 100000 -md sha256 -pass file:/tmp/.secret_key -out /tmp/terraform.tar rm -f /tmp/.secret_key tar xf /tmp/terraform.tar -C / && mkdir ~/.ssh && touch ~/.ssh/id_rsa.pub env: diff --git a/.github/workflows/staging-tests.yml b/.github/workflows/staging-tests.yml index bae81a7c1..74c539322 100644 --- a/.github/workflows/staging-tests.yml +++ b/.github/workflows/staging-tests.yml @@ -50,7 +50,7 @@ jobs: if: inputs.TYPE == 'k8s' - run: | echo "$SECRET_KEY" > /tmp/.secret_key - openssl enc -d -in /tmp/terraform.tar.enc -aes-256-cbc -pbkdf2 -iter 100000 -pass file:/tmp/.secret_key -out /tmp/terraform.tar + openssl enc -d -in /tmp/terraform.tar.enc -aes-256-cbc -pbkdf2 -iter 100000 -md sha256 -pass file:/tmp/.secret_key -out /tmp/terraform.tar rm -f /tmp/.secret_key tar xf /tmp/terraform.tar -C / env: