Swift Encryption TL;DR

gistfile1.txt

The encryption overview document (doc/source/overview_encryption.rst) is very well written.  Please see it for the complete story.

Here’s the TL;DR version

(1) Install new dependencies for crypto (see updates made in requirements.txt)
(2) Add new middleware entries to pipeline in proxy-server.conf:

    <other existing middleware> keymaster encryption proxy-logging proxy-server

(3) Paste the following code in your proxy-server.conf:

    [filter:keymaster]
    use = egg:swift#keymaster
    encryption_root_secret = your_secret
	
    [filter:encryption]
    use = egg:swift#encryption
    # disable_encryption = False

(4) Run this command to generate your encryption secret:

    openssl rand –base64 32
    
(5) Copy the generated secret and paste into proxy-server.conf to replace 'your_secret' with your new generated one
(6) Restart Swift