Refactor key management and encryption and remove CryptoUtil

Fix the tests Save new key's fingerprint to Redis Implement encrypt and decrypt methods Remove TODO Some more changes Implement some more tests Fix remaining tests fix Finalized test suite Run black Linting Tweak Revert new variable name AppArmor Fix teardown code
freedomofpress · Nov 8, 2021 · adeb4a6 · adeb4a6
1 parent 1db19d0
commit adeb4a6
Show file tree

Hide file tree

Showing 26 changed files with 784 additions and 607 deletions.
diff --git a/install_files/ansible-base/roles/build-securedrop-app-code-deb-pkg/files/usr.sbin.apache2 b/install_files/ansible-base/roles/build-securedrop-app-code-deb-pkg/files/usr.sbin.apache2
@@ -165,10 +165,10 @@
   /var/www/securedrop/__pycache__/ rw,
   /var/www/securedrop/__pycache__/* rw,
   /var/www/securedrop/config.py r,
-  /var/www/securedrop/crypto_util.py r,
   /var/www/securedrop/db.py r,
   /var/www/securedrop/dictionaries/adjectives.txt r,
   /var/www/securedrop/dictionaries/nouns.txt r,
+  /var/www/securedrop/encryption.py r,
   /var/www/securedrop/execution.py r,
   /var/www/securedrop/i18n.py r,
   /var/www/securedrop/journalist.py r,

diff --git a/securedrop/crypto_util.py b/securedrop/crypto_util.py