Groups

keywhiz-users

Contact owners and managers

1–30 of 47

0 selected

6/12/20

Advice for using AWS HSM for encrypting secrets

Hi, I would like to use AWS to encrypt our secrets. I am not a crypto expert. public

unread,

Advice for using AWS HSM for encrypting secrets

Hi, I would like to use AWS to encrypt our secrets. I am not a crypto expert. public

6/12/20

Michael, Matthew McPherrin5

6/11/20

Keysync pulling secret but file contains invalid secret

The intended design is that you run keysync on each application node. Only keysync talks to the

unread,

Keysync pulling secret but file contains invalid secret

The intended design is that you run keysync on each application node. Only keysync talks to the

6/11/20

Avinash Ashok Godbole

12/18/19

creation of keystore truststore , ca and keysync pem files

Hi new to keywhiz , I need help for creation of keystore truststore , ca and keysync pem files can

unread,

creation of keystore truststore , ca and keysync pem files

Hi new to keywhiz , I need help for creation of keystore truststore , ca and keysync pem files can

12/18/19

parthasarathy rajagopal

12/18/19

Hi, Getting below error while performing keysync, it will be helpful if detailed documentation is

unread,

Hi, Getting below error while performing keysync, it will be helpful if detailed documentation is

12/18/19

Dickson Daniel, … Alok Menghrajani5

11/18/19

KeywhizFS vs KeySync

Thanks Alok. I got it :) On Tuesday, 19 November 2019 00:25:44 UTC+5:30, Alok Menghrajani wrote: >

unread,

KeywhizFS vs KeySync

Thanks Alok. I got it :) On Tuesday, 19 November 2019 00:25:44 UTC+5:30, Alok Menghrajani wrote: >

11/18/19

Dickson Daniel, … Mat Byczkowski5

11/18/19

Unable to build Keywhiz source

This is our requirement. We are developing a Cloud Management Platform (CMP) , where in our Server

unread,

Unable to build Keywhiz source

This is our requirement. We are developing a Cloud Management Platform (CMP) , where in our Server

11/18/19

Michael Henderson, Matthew McPherrin4

11/8/19

Keysync supports multiple clients (eg, in k8s, each pod). So it would be under $secrets_directory/$

unread,

Keysync supports multiple clients (eg, in k8s, each pod). So it would be under $secrets_directory/$

11/8/19

zwiebelspaetzle

6/6/19

Disaster recovery backup

How is keywhiz duplicated to other datacenters for disaster recovery? Thanks!

unread,

Disaster recovery backup

How is keywhiz duplicated to other datacenters for disaster recovery? Thanks!

6/6/19

Christian Brunette, … Matthew McPherrin9

3/9/18

Encryption/decryption using a PKCS#11 interface of an HSM

There's some reference to configuring providers in the java.security file online, but I haven

unread,

Encryption/decryption using a PKCS#11 interface of an HSM

There's some reference to configuring providers in the java.security file online, but I haven

3/9/18

1/29/18

CLI with self-signed cert on server

I'm not very Java savvy and am having troubles with certificates. I'm running KeyWhiz using

unread,

CLI with self-signed cert on server

I'm not very Java savvy and am having troubles with certificates. I'm running KeyWhiz using

1/29/18

Tom Hanstra, Alok Menghrajani3

1/26/18

Database build failing

docker/keywhiz-config.tpl configures /data/keywhizdb_development but keywhiz-development.yaml.h2 uses

unread,

Database build failing

docker/keywhiz-config.tpl configures /data/keywhizdb_development but keywhiz-development.yaml.h2 uses

1/26/18

Tom Hanstra, Matthew McPherrin2

1/22/18

Install problems with databases

H2 ought to work without any extra setup. Maybe you could post what specific test failed? The default

unread,

Install problems with databases

H2 ought to work without any extra setup. Maybe you could post what specific test failed? The default

1/22/18

Vasudha Gupta, Matthew McPherrin8

10/6/17

My team doesn't plan to add support with any deadline or schedule. It wouldn't be too much

unread,

My team doesn't plan to add support with any deadline or schedule. It wouldn't be too much

10/6/17

Sasidhar Palaka, Matthew McPherrin5

8/19/17

How do I assign a client to a keygroup?

Tenancy: not built into keywhiz. The admin users have full access. We may add more features in the

unread,

How do I assign a client to a keygroup?

Tenancy: not built into keywhiz. The admin users have full access. We may add more features in the

8/19/17

Matthew McPherrin

1/30/17

The end of FUSE

Hello Keywhiz-users, I want to give everyone a heads up about a big upcoming change. The canonical

unread,

The end of FUSE

Hello Keywhiz-users, I want to give everyone a heads up about a big upcoming change. The canonical

1/30/17

Mike Atlas, … Tuomo Salo20

10/14/16

has anyone successfully implemented keywhiz outside of Square?

It's not so much that there's things missing in the documentation, it's more about the

unread,

has anyone successfully implemented keywhiz outside of Square?

It's not so much that there's things missing in the documentation, it's more about the

10/14/16

9/30/16

Thanks for the Updates

Hey Keywhiz Team, Thanks for the updated docs, they look good and give a nice outline of some of the

unread,

Thanks for the Updates

Hey Keywhiz Team, Thanks for the updated docs, they look good and give a nice outline of some of the

9/30/16

Vincent, Matthew McPherrin2

9/24/16

Our auditing is based on logs (syslog from kwfs & the server). We are currently rethinking our

unread,

Our auditing is based on logs (syslog from kwfs & the server). We are currently rethinking our

9/24/16

Chris Nuber, … Matthew McPherrin7

9/20/16

server dependencies?

1.8.0-102 should work. We're using 1.8.0-92 here I'm not sure about the javadoc build issue.

unread,

server dependencies?

1.8.0-102 should work. We're using 1.8.0-92 here I'm not sure about the javadoc build issue.

9/20/16

9/8/16

Server Build Error

Hi. I am trying to build the server, with your designated command: $ mvn package -am -pl server -P h2

unread,

Server Build Error

Hi. I am trying to build the server, with your designated command: $ mvn package -am -pl server -P h2

9/8/16

Matthew Halder, Matthew McPherrin3

9/6/16

If db-seed isn't working, I would recommend you just avoid using it. It mostly exists for unit

unread,

If db-seed isn't working, I would recommend you just avoid using it. It mostly exists for unit

9/6/16

Matthew Halder, … Matthew McPherrin4

8/23/16

The query you want to run is update clients set automationallowed=1 where name="client"; (

unread,

The query you want to run is update clients set automationallowed=1 where name="client"; (

8/23/16

Matthew Halder, … Matthew McPherrin6

8/23/16

Firewall/Security Group ports needed

Seems fair, once I get this out of PoC and development phase that will be something I look at (seems

unread,

Firewall/Security Group ports needed

Seems fair, once I get this out of PoC and development phase that will be something I look at (seems

8/23/16

Matthew Halder, Matthew McPherrin2

8/18/16

Keywhiz Client Library and Mount Points

For (1), we basically only access secrets through keywhiz-fs. There is a Java client in the server

unread,

Keywhiz Client Library and Mount Points

For (1), we basically only access secrets through keywhiz-fs. There is a Java client in the server

8/18/16

Albert So, Matthew McPherrin3

8/15/16

Reading a secret back?

Ahhh, thanks! It would be good to put this in the top level examples somewhere. On Monday, August 15,

unread,

Reading a secret back?

Ahhh, thanks! It would be good to put this in the top level examples somewhere. On Monday, August 15,

8/15/16

Matthew Halder, … Matthew McPherrin23

8/6/16

FS is mounted but gives odd responses

Your screenshot looks like it ought to be set up fine. I haven't seen errors like that before, so

unread,

FS is mounted but gives odd responses

Your screenshot looks like it ought to be set up fine. I haven't seen errors like that before, so

8/6/16

Matthew Halder, Matthew McPherrin2

8/5/16

Docker container Mounting

This issue might be https://github.com/square/keywhiz-fs/issues/8 I don't have any experience

unread,

Docker container Mounting

This issue might be https://github.com/square/keywhiz-fs/issues/8 I don't have any experience

8/5/16

Matthew Halder, Sarah Harvey3

8/1/16

Keywhiz TLS/PEM issue

Relatedly, we have had a lot of trouble getting openssl to give us useful information in the past,

unread,

Keywhiz TLS/PEM issue

Relatedly, we have had a lot of trouble getting openssl to give us useful information in the past,

8/1/16

Rafa, Matthew McPherrin3

7/29/16

Keywhiz authentication

Yes, we don't have a PKI that can help us backing up Keywhiz deployment. Thank you very much for

unread,

Keywhiz authentication

Yes, we don't have a PKI that can help us backing up Keywhiz deployment. Thank you very much for

7/29/16

Matthew Halder, Matthew McPherrin4

7/26/16

Keywhiz-fs make and Dockerfile return errors

Interesting! I don't think we've ever tried to use GCC, but it ought to work. I'll take a

unread,

Keywhiz-fs make and Dockerfile return errors

Interesting! I don't think we've ever tried to use GCC, but it ought to work. I'll take a

7/26/16

Search

Clear search

Close search

Google apps

Main menu