From 4adf95ed6f1a77b09ab071029a498281d7b36aee Mon Sep 17 00:00:00 2001 From: Paul Gschwendtner Date: Mon, 17 Jun 2019 22:37:27 +0200 Subject: [PATCH] ci: publish snapshots job is unable to decode github token (#31099) The publish_snapshots job is currently not able to decode the Github token because the openssl version changed. This is because the default digest for more recent openssl version has been updated and the github token file has been encrypted with an old digest. We need to ensure that the md5 digest is used for decryption as that matches the digest used for encryption. PR Close #31099 --- .circleci/config.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.circleci/config.yml b/.circleci/config.yml index 71e085aecf..33487a99b2 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -503,7 +503,10 @@ jobs: - run: git config --global --unset "url.ssh://git@github.com.insteadof" - run: name: Decrypt github credentials - command: 'openssl aes-256-cbc -d -in .circleci/github_token -k "${KEY}" -out ~/.git_credentials' + # We need ensure that the same default digest is used for encoding and decoding with + # openssl. Openssl versions might have different default digests which can cause + # decryption failures based on the installed openssl version. https://stackoverflow.com/a/39641378/4317734 + command: 'openssl aes-256-cbc -d -in .circleci/github_token -md md5 -k "${KEY}" -out ~/.git_credentials' - run: ./scripts/ci/publish-build-artifacts.sh aio_monitoring_stable: