Major integrations and fixes: - Added BACKBEAT SDK integration for P2P operation timing - Implemented beat-aware status tracking for distributed operations - Added Docker secrets support for secure license management - Resolved KACHING license validation via HTTPS/TLS - Updated docker-compose configuration for clean stack deployment - Disabled rollback policies to prevent deployment failures - Added license credential storage (CHORUS-DEV-MULTI-001) Technical improvements: - BACKBEAT P2P operation tracking with phase management - Enhanced configuration system with file-based secrets - Improved error handling for license validation - Clean separation of KACHING and CHORUS deployment stacks 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
44 lines
1.1 KiB
Go
44 lines
1.1 KiB
Go
package config
|
|
|
|
import (
|
|
"crypto/sha256"
|
|
"io"
|
|
|
|
"golang.org/x/crypto/hkdf"
|
|
|
|
"github.com/libp2p/go-libp2p/core/crypto"
|
|
|
|
"github.com/quic-go/quic-go"
|
|
)
|
|
|
|
const (
|
|
statelessResetKeyInfo = "libp2p quic stateless reset key"
|
|
tokenGeneratorKeyInfo = "libp2p quic token generator key"
|
|
)
|
|
|
|
func PrivKeyToStatelessResetKey(key crypto.PrivKey) (quic.StatelessResetKey, error) {
|
|
var statelessResetKey quic.StatelessResetKey
|
|
keyBytes, err := key.Raw()
|
|
if err != nil {
|
|
return statelessResetKey, err
|
|
}
|
|
keyReader := hkdf.New(sha256.New, keyBytes, nil, []byte(statelessResetKeyInfo))
|
|
if _, err := io.ReadFull(keyReader, statelessResetKey[:]); err != nil {
|
|
return statelessResetKey, err
|
|
}
|
|
return statelessResetKey, nil
|
|
}
|
|
|
|
func PrivKeyToTokenGeneratorKey(key crypto.PrivKey) (quic.TokenGeneratorKey, error) {
|
|
var tokenKey quic.TokenGeneratorKey
|
|
keyBytes, err := key.Raw()
|
|
if err != nil {
|
|
return tokenKey, err
|
|
}
|
|
keyReader := hkdf.New(sha256.New, keyBytes, nil, []byte(tokenGeneratorKeyInfo))
|
|
if _, err := io.ReadFull(keyReader, tokenKey[:]); err != nil {
|
|
return tokenKey, err
|
|
}
|
|
return tokenKey, nil
|
|
}
|