logstash-plugins/logstash-filter-cipher

Add a key_file parameter to allow storing the key in a separate file

naftulikay opened this issue · 3 comments

naftulikay commented

The company I work for would like to use the cipher plugin, but cannot do so for a couple reasons. The first is referenced by issue #1 (static IV), and the second is that we cannot store the cipher key in the Logstash configuration file.

Can you please allow a key_file parameter which would allow us to store the key in a separate file and out of version control? You can follow the lead of logstash-output-s3 and have a YAML file like this:

:key: "AAAAAAAAAAAAAAA"
bitsofinfo commented

I'll look at adding this, but I have no idea what the timeframe is when they will merge anything. The whole plugins project itself seems in limbo.

bitsofinfo commented

Also where in the logstash-output-s3 project do you see this method of doing that?

naftulikay commented

@bitsofinfo It's actually referenced here in the AWS mixins. You can specify a YAML file for your AWS credentials.