Re: [cmake-developers] Downloading file from S3 private bucket
Circumstances changed, we are not interested in this feature anymore at
this moment.
Just for the record workarounds using external call to 'openssl' can be
found here:
* https://gitlab.kitware.com/cmake/cmake/merge_requests/105
* https://gitlab.kitware.com/cmake/cmake/merge_requests/108
Ruslo
On 13-Sep-16 16:28, Ruslan Baratov wrote:
On 13-Sep-16 15:58, Brad King wrote:
On 09/13/2016 07:42 AM, Ruslan Baratov via cmake-developers wrote:
Will it be okay if CMake will optionally depend on OpenSSL?
Or other third party crypto library?
Currently the only place that needs it is through `curl`, and
that uses either OpenSSL or the Windows-native or macOS-native
APIs for TLS.
So your suggestion is to extend 'file' command? Like
`file(DOWNLOAD|UPLOAD S3_KEY S3_SECRET )`?
It looks like curl does support HMAC.
I don't know, will take a look. We need this functionality:
echo -n "${stringToSign}" | openssl sha1 -hmac "${secret}" -binary |
base64
Ruslo
--
Powered by www.kitware.com
Please keep messages on-topic and check the CMake FAQ at:
http://www.cmake.org/Wiki/CMake_FAQ
Kitware offers various services to support the CMake community. For more
information on each offering, please visit:
CMake Support: http://cmake.org/cmake/help/support.html
CMake Consulting: http://cmake.org/cmake/help/consulting.html
CMake Training Courses: http://cmake.org/cmake/help/training.html
Visit other Kitware open-source projects at
http://www.kitware.com/opensource/opensource.html
Follow this link to subscribe/unsubscribe:
http://public.kitware.com/mailman/listinfo/cmake-developers
Re: [cmake-developers] Downloading file from S3 private bucket
On 13-Sep-16 15:58, Brad King wrote:
On 09/13/2016 07:42 AM, Ruslan Baratov via cmake-developers wrote:
Will it be okay if CMake will optionally depend on OpenSSL?
Or other third party crypto library?
Currently the only place that needs it is through `curl`, and
that uses either OpenSSL or the Windows-native or macOS-native
APIs for TLS.
So your suggestion is to extend 'file' command? Like
`file(DOWNLOAD|UPLOAD S3_KEY S3_SECRET )`?
It looks like curl does support HMAC.
I don't know, will take a look. We need this functionality:
echo -n "${stringToSign}" | openssl sha1 -hmac "${secret}" -binary |
base64
Ruslo
--
Powered by www.kitware.com
Please keep messages on-topic and check the CMake FAQ at:
http://www.cmake.org/Wiki/CMake_FAQ
Kitware offers various services to support the CMake community. For more
information on each offering, please visit:
CMake Support: http://cmake.org/cmake/help/support.html
CMake Consulting: http://cmake.org/cmake/help/consulting.html
CMake Training Courses: http://cmake.org/cmake/help/training.html
Visit other Kitware open-source projects at
http://www.kitware.com/opensource/opensource.html
Follow this link to subscribe/unsubscribe:
http://public.kitware.com/mailman/listinfo/cmake-developers
Re: [cmake-developers] Downloading file from S3 private bucket
On 09/13/2016 07:42 AM, Ruslan Baratov via cmake-developers wrote: > Will it be okay if CMake will optionally depend on OpenSSL? > Or other third party crypto library? Currently the only place that needs it is through `curl`, and that uses either OpenSSL or the Windows-native or macOS-native APIs for TLS. It looks like curl does support HMAC. -Brad -- Powered by www.kitware.com Please keep messages on-topic and check the CMake FAQ at: http://www.cmake.org/Wiki/CMake_FAQ Kitware offers various services to support the CMake community. For more information on each offering, please visit: CMake Support: http://cmake.org/cmake/help/support.html CMake Consulting: http://cmake.org/cmake/help/consulting.html CMake Training Courses: http://cmake.org/cmake/help/training.html Visit other Kitware open-source projects at http://www.kitware.com/opensource/opensource.html Follow this link to subscribe/unsubscribe: http://public.kitware.com/mailman/listinfo/cmake-developers
[cmake-developers] Downloading file from S3 private bucket
Hi, Currently I'm investigating possibilities of downloading files from private S3 bucket using CMake. The only real issue I see for now is the computing of HMAC + SHA1. This look like a work for some new cryptographic module in family of 'string' functions similar to 'string(MD5|SHA1|...)'. So if we are talking about new command 'string(HMAC SHA1)' what will be the right path to implement it? I took a brief look at hashing functions and it seems that it was not using OpenSSL (what I was thinking before). Will it be okay if CMake will optionally depend on OpenSSL? Or other third party crypto library? Also I know that it's possible to use Query String Request Authentication. It means I can create URL with key and signature in query part first, then put it into file(DOWNLOAD) command. However HMAC + SHA1 in CMake itself offer more opportunities and sounds more solid for me. Thoughts? Ruslo -- Powered by www.kitware.com Please keep messages on-topic and check the CMake FAQ at: http://www.cmake.org/Wiki/CMake_FAQ Kitware offers various services to support the CMake community. For more information on each offering, please visit: CMake Support: http://cmake.org/cmake/help/support.html CMake Consulting: http://cmake.org/cmake/help/consulting.html CMake Training Courses: http://cmake.org/cmake/help/training.html Visit other Kitware open-source projects at http://www.kitware.com/opensource/opensource.html Follow this link to subscribe/unsubscribe: http://public.kitware.com/mailman/listinfo/cmake-developers
