Skip to content

ADBM-3528: Implement custom repo-cipher-type support - #112

Draft
riogor wants to merge 44 commits into
2.54-cifrom
ADBM-3528
Draft

riogor wants to merge 44 commits into
2.54-cifrom
ADBM-3528

Conversation

@riogor

@riogor riogor commented Oct 27, 2026

Copy link
Copy Markdown

Implement custom repo-cipher-type support.
Use actual cipherType instead of hard-coded aes-256-cbc.

Add gost cipher support with custom error message

Ticket: ADBM-3528

dwsteele and others added 28 commits October 26, 2026 07:03
Both commands read the repo cipher options to load backup.info, but when the repo is remote those options are pulled from the remote the first time the repo storage is created. Reading them before that leaves the load with no cipher when the repository is encrypted and the cipher is configured only on the repo host, and the load fails.

In manifest the storage and the options are arguments to the same call, so the order they are evaluated in is up to the compiler and whether the command works depends on how it was built. In annotate the cipher type is read by the statement before the load, so it is always read too early.

Get the repo storage first, as backup, expire, verify, info, and archive-get already do. In annotate this goes inside the TRY block so a repo that cannot be reached is reported and skipped like any other error there.

(cherry-picked from pgbackrest/pgbackrest@078489fa3)

Ticket: ADBM-3528
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants