Method createSystemKey

idm/key/grpc/handler.go:286–317

Create a default key or create a system key with a given ID

(ctx context.Context, keyID string, keyLabel string)

// Create a default key or create a system key with a given ID
func (ukm *userKeyStore) createSystemKey(ctx context.Context, keyID string, keyLabel string) error {
	dao, err := manager.Resolve[key.DAO](ctx)
	if err != nil {
		return err
	}

	systemKey := &enc.Key{
		ID:           keyID,
		Owner:        common.PydioSystemUsername,
		Label:        keyLabel,
		CreationDate: int32(time.Now().Unix()),
	}

	keyContentBytes := make([]byte, 32)
	if _, err := rand.Read(keyContentBytes); err != nil {
		return err
	}

	master, err := ukm.masterFromCache(ctx)
	if err != nil {
		return err
	}

	masterKey := crypto.KeyFromPassword(master, 32)
	encryptedKeyContentBytes, err := crypto.Seal(masterKey, keyContentBytes)
	if err != nil {
		return errors.WithMessagef(errors.StatusInternalServerError, "failed to encrypt the default key. Cause: %s", err.Error())
	}
	systemKey.Content = base64.StdEncoding.EncodeToString(encryptedKeyContentBytes)
	log.Logger(ctx).Debug(fmt.Sprintf("Saving default key %s", systemKey.Content))
	return dao.SaveKey(ctx, systemKey)
}

func (ukm *userKeyStore) masterFromCache(ctx context.Context) (master []byte, err error) {
	ka, er := cache_helper.ResolveCache(ctx, common.CacheTypeLocal, keyCacheConfig)