Bug #20668: rgw multisite: cannot sync objects encrypted with SSE-C - rgw - Ceph

Actions

Copy link

Bug #20668

closed

rgw multisite: cannot sync objects encrypted with SSE-C

Added by Casey Bodley almost 7 years ago. Updated over 6 years ago.

Status:

Resolved

Priority:

High

Assignee:

Casey Bodley

Target version:

% Done:

Source:

Tags:

Backport:

luminous

Regression:

Severity:

3 - minor

Reviewed:

Affected Versions:

ceph-qa-suite:

Pull request ID:

Crash signature (v1):

Crash signature (v2):

Description

GET requests for encrypted objects require special headers for SSE-C, enforced by rgw_s3_prepare_decrypt(). Multisite sync requests do not include these headers, and will be rejected with 400 Bad Request. These objects should be fetched in encrypted form, so that they can be decrypted on the target zone when the correct SSE-C headers are presented.

Related issues 2 (0 open — 2 closed)