Page MenuHomePhabricator

Change encryption method of export files to GPG
Closed, ResolvedPublic3 Estimated Story Points

Description

We want to change the encryption method of exported data to GPG. The third-party software provider that is picking up the files needs to test their implementation of automatic processing, so we have to provide a test file for them. We can run the exporter and just write the column headers to a file.

Acceptance Criteria:

  • The recipient's public GPG key is present on the machine creating the export files
  • The nightly CSV exports are compressed and then encrypted using GPG
  • Formerly used encryption keys are removed from the ansible-vault
  • The respective user's home directory contains a folder called data_test.
  • The test folder contains an encrypted file for the third-party to test.

Event Timeline

The export files are not zipped anymore

What is the rationale behind this requirement? Doesn't this drastically increase the required disk space?

Thanks for pointing out. Of course, the files should be encrypted, but not using 7za.

Updated the task description to clarify the order of compression and description, as per https://stackoverflow.com/a/4399876/130121

gabriel-wmde set the point value for this task to 3.Jul 2 2018, 10:44 AM

I've exported some of today's donations into data_test/donations-201807161727.zip.gpg and used a modified version of the export script. When the third party has successfully tested this, we need to amend the PR to replace the export.sh script with export_gpg.sh, then run the backend.yml script.