Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • specify the JITL job class and com.sos.jitl.jobs.encrypt.EncryptJob Java class name..

Arguments

NameDescription
encipherment_certificate

The CA signed or self-signed X.509 certificate. Alternatively the public key can be specified. This variable is normally provided via a job resource that is managed with the certificate management.

in

Specifies the input value that should be encrypted, typically a secret. One of the options 'in' or 'infile' has to be specified.

infile

Specifies the path to a file that should be encrypted. One of the options 'in' or 'infile' has to be specified. This option requires use of the 'outfile' .

outfile

Specifies the path to the output file that will be created holding the encrypted content of the input file. The option is used if 'infile' is specified.


Return Values

NameDescription
js7EncryptedValue

When infile is specified the value contains

  • the encrypted symmetric key
  • the initialization vector
  • the path to encrypted file separated by space.

When infile is not specified. 

  • the encrypted symmetric key
  • the initialization vector
  • the encrypted value  

The value is needed for decoding:

  • The encrypted symmetric key is decrypted with the private key
  • The encrypted file is decrypted using the decrypted symmetric key and the initialisation vector.
in

Specifies the input value that should be encrypted, typically a secret. One of the options 'in' or 'infile' has to be specified.

infile

Specifies the path to a file that should be encrypted. One of the options 'in' or 'infile' has to be specified. This option requires use of the 'outfile' .

outfile

Specifies the path to the output file that will be created holding the encrypted content of the input file. The option is used if 'infile' is specified.


Using in a workflow


This example workflow includes 3 jobs

  • job_encrypt: To encrypt a value. The certificate is directly assigned as a string value. The value for the certificate also can be provided by a job resource.
  • job_result: to show the outcome of the encryption.
  • decrypt_secret: to decrypt the encrypted value. The decryption is made with the script js7_decrypt.sh. Please refere to https://kb.sos-berlin.com/x/Qx1SC


Image Added


The workflow configuration can be downloaded from here: encryptionValue.workflow.json