me0nline/LOGAR
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 10 Wiki Activity

fix(security): ensure encryption at rest and buffering are never auto-enabled upon licensing without explicit admin configuration
CI Test Suite / Run Component Tests & Pipeline Verification (push) Successful in 1m16s
Details

Browse Source
This commit is contained in:
me0nline
2026-09-30 17:43:30 +02:00
parent f0bf90e033
commit 2b0b680188
1 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/Server.py
+4 -5
View File
@@ -1261,14 +1261,13 @@ def get_server_public_key() -> Optional[pgpy.PGPKey]:
def encrypt_field_for_storage(text: str, force: bool = False) -> str: def encrypt_field_for_storage(text: str, force: bool = False) -> str:
""" """Encrypts a text payload using the server's OpenPGP public key if encrypt_at_rest is enabled."""
Encrypts a text payload using the server's OpenPGP public key if encrypt_at_rest is enabled.
Guarantees zero-knowledge database hosting on external database servers.
"""
if not text or not isinstance(text, str): if not text or not isinstance(text, str):
return text return text
config = SERVER_STATE.get("config", {}) config = SERVER_STATE.get("config", {})
should_encrypt = force or config.get("encrypt_at_rest", False) db_path = config.get("db_path", DEFAULT_DB_FILE)
is_unlocked = is_feature_licensed("enterprise_db", db_path)
should_encrypt = force or (is_unlocked and bool(config.get("encrypt_at_rest", False)))
if not should_encrypt: if not should_encrypt:
return text return text