github Particular/NServiceBus 3.3.11

latest releases: 9.0.0, 8.2.0, 9.0.0-alpha.10...
9 years ago

As part of this release we had 1 issues closed.

Features

#2287 Enable users to switch encryption keys without message loss

Since the dawn of time we've only supported 1 encryption key in the ootb encryption(AES) and this makes it close to impossible to switch keys without losing data, messages in SLR, or ERROR queues would have the wrong key and fail to decrypt.

The users only options is either to not switch keys which is no good in terms of security best practices or implement their own ISecurityService

The proposed solution is to allow for secondary keys that we fall back to if decryption fails. This way users can add new primary keys (used to encrypt) but still keep the old key(s) around long enough to be able to process messages in SLR or the error queue.

This bug needs to be backported to all supported versions (v3.3 and up)

Where to get it

You can download this release from nuget

Don't miss a new NServiceBus release

NewReleases is sending notifications on new releases.