[
https://issues.apache.org/jira/browse/HDDS-10786?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18005257#comment-18005257
]
Wei-Chiu Chuang commented on HDDS-10786:
----------------------------------------
HMAC-SHA256 is the only supported algorithm to generate sigantures for AWS
Signature Version 4 (SigV4).
SigV4a ([https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv.html)]
would require AWS4-ECDSA-P256-SHA256. It would enable AWS S3 Multi-Region
Access Points [https://aws.amazon.com/s3/features/multi-region-access-points/]
but currently we don't support this feature/ plan to support.
> Handle cryptography algorithms in S3 payload and request signature
> ------------------------------------------------------------------
>
> Key: HDDS-10786
> URL: https://issues.apache.org/jira/browse/HDDS-10786
> Project: Apache Ozone
> Issue Type: Bug
> Reporter: Zita Dombi
> Priority: Major
>
> In the AWSV4AuthValidator class we are using HmacSHA256 algorithm during the
> signature. The StringToSignProducer class contains SHA-256 algorithm usage in
> the request hashing.
> We need to look into what algorithms can we use with S3 and maybe make them
> configurable if needed.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
