From 19db92155504f9fd05a47bcced4f15ea3b36aafa Mon Sep 17 00:00:00 2001 From: poornas Date: Tue, 21 Aug 2018 15:12:00 -0700 Subject: [PATCH] CopyObject: fix regression in key rotation (#6331) After key rotation, metadata was not being replaced with new sealed key. Regression introduced in commit e71ef905f9547514d1f2ebf1732be8f2a6e094f7 --- cmd/encryption-v1.go | 1 + 1 file changed, 1 insertion(+) diff --git a/cmd/encryption-v1.go b/cmd/encryption-v1.go index e1990c135..1d87d4886 100644 --- a/cmd/encryption-v1.go +++ b/cmd/encryption-v1.go @@ -147,6 +147,7 @@ func rotateKey(oldKey []byte, newKey []byte, bucket, object string, metadata map } copy(extKey[:], newKey) sealedKey = objectKey.Seal(extKey, sealedKey.IV, crypto.SSEC.String(), bucket, object) + crypto.SSEC.CreateMetadata(metadata, sealedKey) return nil } }