Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Always use offline public key for license verification #137

Merged
merged 1 commit into from
Oct 25, 2024

Conversation

ramondeklein
Copy link
Contributor

The MinIO console attempts to verify the license key. It needs the public key to verify the license signature and it downloads the key from subnet. MinIO is not supposed to contact external sites, unless explicitly asked to do so (minio/console#3456).

It now always uses the embedded public key (like it already did when subnet couldn't be reached). All license based products will be moving to AIStor eventually, so having the ability to deal with a rotating public key is less important.

@ramondeklein
Copy link
Contributor Author

When this PR is merged, then MinIO console should be updated to use the new package version.

@ramondeklein ramondeklein self-assigned this Oct 25, 2024
@ramondeklein ramondeklein changed the title Always use offline public key Always use offline public key for license verification Oct 25, 2024
Copy link
Contributor

@anjalshireesh anjalshireesh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@harshavardhana harshavardhana merged commit e47bfc3 into minio:main Oct 25, 2024
3 checks passed
@ramondeklein ramondeklein deleted the disable-pubkey-download branch October 25, 2024 15:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants