what is the TLS version for csi-secrets-store-provider-azure-0.2.1? - tls1.2

Currently I use csi-secrets-store-provider-azure-0.2.1 with version 0.2.0. I am having a question. Does the operator uses TLS to communicate with Microsoft Azure Key Vault? If yes, which version.
I am asking the above question because I had seen that the TLS Versions below 1.2 will be deprecated and I want to be sure, if this might affect my application.
Thanks for the answers in advance.
Regards,
Chaitanya

Related

SignalR general questions

I have in fact couple question regarding that library, hopefully anyone to answer avoiding create separated topics. If that's not the place to ask let me know where please. Nevertheless i think your answer find other people to get knowledge as well because saw lot of confusions on internet regarding that staff.
Q's:
I see that current SignalR version is 2.2.3 however i cannot find any relase notes for that - only for 2.2.2, does somebody knows why?
Is there any risk updating from 2.2.1 to 2.2.3? I have such big appliation in my current version would all work as it was or is there
anything that has to be changed migrating to most recent version?
Is there any diffrence with SignalR, SignalR2 and SignalR ASP.NET? I am bit confused
Is SignalR also permitted to be developed in commercial use or do i need any specific license?
I've found lot of samples based on signalR howeever could you provide most up to date sample showing all recent feature from current
release.
Last question: Is there any significant change comparing version 2.2.1 and 2.2.3 especially related to async usage or it's more like almost the same creating server/client apps?
On this page i see nice tutorial how to use signalr, however is this page official always updating to the current signalr release?https://www.asp.net/signalr . Aksing because saw also github page any others. If not could you direct me to correct one please.
Is this sample up to date regarding new features?
There was chat saple available JabR if recall, is there still a working link to this sample?
As far as i was able to create some chat i wonder how JabR stores chat conversations history in the way that every client whom joined chat could see conversation which was done when he was not connected. In other words how to make every new joiner to chat to see all conversations already in chat by other users is this possible in signalR engine itself?
Many thanks to whoever answer.
I'm trying to answer your questions.
Already mentioned, only a single fix.
It worked for my application, can't really tell if it works for yours. More infos regarding the 2.2.2 release: https://github.com/SignalR/SignalR/releases/tag/2.2.2
I'm not quite sure what you mean. But yes there were different versions of SignalR other the last years:
SignalR 1 (2012-2014)
SignalR 2 (2014-now | Current version: 2.2.3 | Github: https://github.com/SignalR/SignalR)
SignalR '3' (aka ASP.NET Core SignalR | Release: mid 2018 | Current pre version: 1.0.0-rc1-final | Github: https://github.com/aspnet/SignalR)
I guess, not that I'm aware of. See https://www.microsoft.com/web/webpi/eula/net_library_eula_ENU.htm (SignalR 2)
https://raw.githubusercontent.com/aspnet/Home/2.0.0/LICENSE.txt (SignalR 3)
Checkout the samples here: https://www.asp.net/signalr They all target SignalR 2 currently and will be updated as soon as ASP.NET Core 2.1 and SignalR '3' is released.
Don't know, I haven't changed anything in my code.
As already mentioned in 5., they will update the page as soon as ASP.NET Core 2.1 is released (see comment section in https://blogs.msdn.microsoft.com/webdev/2018/05/07/asp-net-core-2-1-0-rc1-now-available/ )
I guess?
Do you mean this one: https://learn.microsoft.com/en-us/aspnet/signalr/overview/getting-started/tutorial-getting-started-with-signalr ?
I'm not aware of a SignalR feature which stores messages. I think you have to implement this yourself.

How to create Airflow read only users?

Is there a way to create read only users in Airflow ? I see there is some discussion about that is Airflow 2.0 https://cwiki.apache.org/confluence/display/AIRFLOW/Airflow+2.0
Does anyone know if that has been incorporated in 1.9 ? We are currently using 1.8.
There’s work ongoing in this PR:
https://github.com/apache/incubator-airflow/pull/3015
Design (early):
https://cwiki.apache.org/confluence/display/AIRFLOW/Airflow+RBAC+proposal
To my knowledge it's not available right now. Maybe at the next major version

NGINX with SPDY v2, v3, and v3.1?

I'm currently running Ubuntu 12.04 LTS with NGINX 1.5.10 and SPDY v3.1. While implementing SPDY, I've seen web servers that are supporting multiple versions of the SPDY protocol. For an example you can see:
http://spdycheck.org/#google.com
http://spdycheck.org/#facebook.com
Obviously these are some of the biggest sites around, but I've looked for guidelines or documentation on how to support the different versions of the protocol, but there are no clear answers.
I'm not sure whether this is possible but any help or guidance as to how to achieve this would be much appreciated!
Thanks!
Alex
I've looked for guidelines or documentation on how to support the
different versions of the protocol, but there are no clear answers.
The answer is simple: don't, just use the latest version. Both Chrome and Firefox are aggressive about deprecating support for older versions -- e.g. expect spdy/v2 support to be removed in Q2/Q3 of 2014; IE should keep up as well.
If you want to track progress and watch out for announcements around new drafts or plans to deprecate old versions, sign up for spdy-dev mailing list.
It depends on which version of nginx you installed. The current version will install the current version of SPDY. SPDY 3.1 is in a module built for nginx.
You shouldn't have to do anything different to your code to support the different versions since this is a transport mechanism for the server.

Is there a pure Erlang cryptography library with support for AES?

I need to use AES encryption in my embedded Erlang application, but OpenSSL is unavailable for my target system and so the crypto library from OTP can't be built. I probably could cross-compile OpenSSL as well, but I would prefer a pure Erlang solution to remove another dependency. Does one exist?
Looked at this a while ago and found no nice solution other than OpenSSL/crypto. Sorry.
Unless someone made a new library recently but I haven't heard about it since then.
It's more likely that someone has already solved the problem of easily installing OpenSSL on your target system. Would focus my energy on that instead.
The crypto module has been OpenSSL dependent for a long time. The pure Erlang version might not be impossible, but it will be very very slow and will not be practical in use.

Encrypt on iSeries

What tools are available to encrypt or password-protect a file stored on the IFS?
*integrated file-system, accessible from Windows
You could setup object security so only certain users can view the file.
There are encryption tools available for purchase. There is also some built-in APIs for encrypting.
Here are some resources to look into:
Scenario: Key Management and File Encryption Using the Cryptographic Services APIs
The Next Step in Security
A Simple Encryption/Decryption Algorithm for Numbers
Cryptographic Services APIs
Most of these articles deal with encrypting data in a table, but the concepts should help you encrypt a file on the IFS.
Or you could simply encrypt the file from a Windows box with ccrypt or TrueCrypt (perhaps not what you are looking for). Both are free. As is GnuPG which has a windows port and is probably the best of the bunch.
Don't forget that iSeries with PASE can run many AIX programs as is.
ccrypt for AIX could almost definitely be made to run on the iSeries and be called from QSH. And similarly for GnuPG for AIX; it could be run on the iSeries itself.
There is PkZIP for the iSeries which can provide encryption.
You could also 'roll your own' encryption using Java Cryptography.
We are currently using Arpeggio, which is free. We used to use PKZip, but were able to replace that tool with the free Arpeggio software. Seems to work well
You can set the authority to the file so only users in one group have access to it. I think its option 9 I don't have access to a iseries at this moment.
You can pull a port of GnuPG from Scott Klement's website at : https://www.scottklement.com/gnupg/. We have been using it without issue for years.
A lot has changed since this question was asked! IBM i now has extensive support for open source software in PASE. Several of the other answers here mention packages that IBM now provides for no cost as RPMs, easily installable via yum (or the Access Client Solutions GUI, which includes a graphical front-end for yum). Here is just a sampling of IBM-packaged tools you could use for encryption of IFS files:
GnuPG
p7zip (POSIX version of 7-Zip, compatible with and mostly superior to PKZIP)
Python, Node.js, and other programming languages, with access to various encryption libraries
Note that the RPM-based packaging is only supported on IBM i 7.2 and above. (Some people have been able to get it working on 7.1, but this requires the right combination of PTFs and know-how.)
For those on older (and by now, far out of support) versions of IBM i and its predecessors, you may be able to use Scott Klement's ports of GnuPG and p7zip, or Per Gummedal's iSeriesPython.

Resources