Developer Notes

This page contains a series of notes intended to be beneficial for any contributors to AOSSL.

Generating Releases

The release_gen.sh script is utilized to generate releases for various systems. It is run from within the scripts folder. It accepts three command line arguments:

the name of the release: aossl-*os_name*-*os_version*
the version of the release: we follow semantic versioning
the location of the dependency script: current valid paths are linux/deb (uses apt-get) and linux/rhel (uses yum)

Security Notes

Currently AOSSL components are unsecured. Three critical security needs have been identified:

Consul 'Secret Store' using Hashicorp Vault as a backend. Allow for secure storage of private config values.
ZMQ LibCurve encryption, using built-in security mechanisms of 0MQ to encrypt messages sent and decrypt messages recieved.
HTTPS Support, for securing HTTP Communications. Further encryptions via HTTP would need to be handled by end user.

Go Home