The encryptedFieldsMap exported by the command must contain the keyId

XMLWordPrintableJSON

    • Type: Bug
    • Resolution: Unresolved
    • Priority: Critical - P2
    • None
    • Affects Version/s: None
    • Component/s: Doctrine
    • None
    • PHP Drivers
    • None
    • None
    • None
    • None
    • None
    • None

      When setting autoEncryption.encryptedFieldsMap in the bundle configuration, the keyId is required. It must be a BSON Binary UUID.

      • The bundle configuration must accept the keyId, and convert the value into BSON Binary UUID.
      • The command "doctrine:mongodb:dump-encrypted-fields-map" must dump the UUID (which seems impossible from the metadata).

      We can use altKeyName when creating the key, and use it in the encryptedFieldMap configuration. Then we have to instantiate a MongoDB\Driver\Manager, to create a ClientEncryption and retrieve every keys in order to generate the driver options to create the MongoDB Client.

            Assignee:
            Unassigned
            Reporter:
            Jérôme Tamarelle
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: