Encrypt machine.ssh_public_key_data (in case users paste in signed data)

This commit is contained in:
Ryan Petrello 2019-02-26 17:45:26 -05:00 committed by Jake McDermott
parent ca6d124417
commit 13366c1e75
No known key found for this signature in database
GPG Key ID: 9A6F084352C3A0B7

View File

@ -824,6 +824,7 @@ ManagedCredentialType(
'label': ugettext_noop('Signed SSH Certificate'),
'type': 'string',
'multiline': True,
'secret': True,
}, {
'id': 'ssh_key_unlock',
'label': ugettext_noop('Private Key Passphrase'),
@ -1360,8 +1361,11 @@ class CredentialInputSource(PrimordialModel):
backend_kwargs[field_name] = value
backend_kwargs.update(self.metadata)
raw = self.target_credential.inputs.get(self.input_field_name)
if self.input_field_name in self.target_credential.credential_type.secret_fields:
raw = decrypt_field(self.target_credential, self.input_field_name)
return backend(
self.target_credential.inputs.get(self.input_field_name),
raw,
**backend_kwargs
)