diff options
Diffstat (limited to 'weed/s3api/s3api_key_rotation.go')
| -rw-r--r-- | weed/s3api/s3api_key_rotation.go | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/weed/s3api/s3api_key_rotation.go b/weed/s3api/s3api_key_rotation.go index e8d29ff7a..499505678 100644 --- a/weed/s3api/s3api_key_rotation.go +++ b/weed/s3api/s3api_key_rotation.go @@ -100,9 +100,9 @@ func (s3a *S3ApiServer) rotateSSEKMSMetadataOnly(entry *filer_pb.Entry, srcKeyID // rotateSSECChunks re-encrypts all chunks with new SSE-C key func (s3a *S3ApiServer) rotateSSECChunks(entry *filer_pb.Entry, sourceKey, destKey *SSECustomerKey) ([]*filer_pb.FileChunk, error) { // Get IV from entry metadata - iv, err := GetIVFromMetadata(entry.Extended) + iv, err := GetSSECIVFromMetadata(entry.Extended) if err != nil { - return nil, fmt.Errorf("get IV from metadata: %w", err) + return nil, fmt.Errorf("get SSE-C IV from metadata: %w", err) } var rotatedChunks []*filer_pb.FileChunk @@ -125,7 +125,7 @@ func (s3a *S3ApiServer) rotateSSECChunks(entry *filer_pb.Entry, sourceKey, destK if entry.Extended == nil { entry.Extended = make(map[string][]byte) } - StoreIVInMetadata(entry.Extended, newIV) + StoreSSECIVInMetadata(entry.Extended, newIV) entry.Extended[s3_constants.AmzServerSideEncryptionCustomerAlgorithm] = []byte("AES256") entry.Extended[s3_constants.AmzServerSideEncryptionCustomerKeyMD5] = []byte(destKey.KeyMD5) |