Keywhiz (Parent)

A distribution system for secrets.

License	Apache 2.0
Categories	Square Business Logic Libraries Financial KeY Data Data Formats Formal Verification Keywhiz Security
GroupId	com.squareup.keywhiz
ArtifactId	keywhiz-parent
Last Version	0.10.1
Release Date	Sep 7, 2019
Type	pom
Description	Keywhiz (Parent) A distribution system for secrets.
Project URL	https://github.com/square/keywhiz
Source Code Management	https://github.com/square/keywhiz/

Download keywhiz-parent

Filename	Size
keywhiz-parent-0.10.1.pom	21 KB

How to add to project

Apache Maven

<!-- https://jarcasting.com/artifacts/com.squareup.keywhiz/keywhiz-parent/ -->
<dependency>
    <groupId>com.squareup.keywhiz</groupId>
    <artifactId>keywhiz-parent</artifactId>
    <version>0.10.1</version>
    <type>pom</type>
</dependency>

Gradle Groovy

// https://jarcasting.com/artifacts/com.squareup.keywhiz/keywhiz-parent/
implementation 'com.squareup.keywhiz:keywhiz-parent:0.10.1'

Gradle Kotlin

// https://jarcasting.com/artifacts/com.squareup.keywhiz/keywhiz-parent/
implementation ("com.squareup.keywhiz:keywhiz-parent:0.10.1")

Apache Buildr

'com.squareup.keywhiz:keywhiz-parent:pom:0.10.1'

Apache Ivy

<dependency org="com.squareup.keywhiz" name="keywhiz-parent" rev="0.10.1">
  <artifact name="keywhiz-parent" type="pom" />
</dependency>

Groovy Grape

@Grapes(
@Grab(group='com.squareup.keywhiz', module='keywhiz-parent', version='0.10.1')
)

Scala SBT

libraryDependencies += "com.squareup.keywhiz" % "keywhiz-parent" % "0.10.1"

Leiningen

[com.squareup.keywhiz/keywhiz-parent "0.10.1"]

Dependencies

There are no dependencies for this project. It is a standalone project that does not depend on any other jars.

Project Modules

• api
• client
• cli
• hkdf
• model
• server
• testing
• log

Keywhiz

Keywhiz is a system for distributing and managing secrets. For more information, see the website.

Our Protecting infrastructure secrets with Keywhiz blog post is worth reading, as it provides some useful context.

Develop

Keywhiz requires Java 11 and MySQL 5.7 or higher.

See CONTRIBUTING for details on submitting patches.

Build Keywhiz:

mvn install

Run Keywhiz:

java -jar server/target/keywhiz-server-*-shaded.jar [COMMAND] [OPTIONS]

Useful commands to get started are migrate, add-user and server. Use with --help for a list of all available commands. Use with [COMMAND] --help to get help on a particular command.

For example, to run Keywhiz with a mysql database in development mode:

SERVER_JAR="server/target/keywhiz-server-*-shaded.jar"
KEYWHIZ_CONFIG="server/target/classes/keywhiz-development.yaml"

# Initialize dev database
java -jar $SERVER_JAR migrate $KEYWHIZ_CONFIG

# Add an administrative user
java -jar $SERVER_JAR add-user $KEYWHIZ_CONFIG

# Run server
java -jar $SERVER_JAR server $KEYWHIZ_CONFIG

To connect to a running Keywhiz instance, you will need to use the CLI.

An example helper shell script that wraps the keywhiz-cli and sets some default parameters:

#!/bin/sh

# Set the path to a compiled, shaded keywhiz-cli JAR file
KEYWHIZ_CLI_JAR="/path/to/keywhiz-cli-shaded.jar"
KEYWHIZ_SERVER_URL="https://$(hostname):4444"

# Use these flags if you want to specify a non-standard CA trust store.
# Alternatively, in development and testing specify the --devTrustStore 
# flag to use the default truststore (DO NOT use this in production, as
# the truststore is checked into Keywhiz' code).
TRUSTSTORE="-Djavax.net.ssl.trustStore=/path/to/ca-bundle.jceks"
TRUSTTYPE="-Djavax.net.ssl.trustStoreType=JCEKS"

java "$TRUSTSTORE" "$TRUSTTYPE" -jar "$KEYWHIZ_CLI_JAR" -U "$KEYWHIZ_SERVER_URL" "$@"

Keywhiz uses jOOQ to talk to its database.

If you made changes to the database model and want to regenerate sources:

mvn install -pl model/ -Pgenerate-jooq-sources

We recommend IntelliJ IDEA for development.

Clients & API

Square also maintains a Keywhiz client implementation called Keysync.

Docker

We ship a Dockerfile for building a Docker container for Keywhiz. Please see the Dockerfile for extra instructions.

License

Keywhiz is under the Apache 2.0 license. See the LICENSE file for details.

Square

Versions

Version
0.10.1 Sep 7, 2019
0.8.0 Jun 27, 2017
0.7.10-mysql Dec 9, 2015
0.7.10 Nov 24, 2015
0.7.9-sync Nov 12, 2015
0.7.9-mysql Nov 13, 2015
0.7.9 Nov 12, 2015
0.7.8 Oct 27, 2015
0.7.7-2 Oct 27, 2015
0.7.7 Oct 21, 2015
0.7.6 Jun 23, 2015
0.7.5 Jun 9, 2015
0.7.4 Jun 9, 2015
0.7.3 Apr 9, 2015
0.7.2 Apr 2, 2015
0.7.1 Apr 2, 2015
0.7.0 Apr 1, 2015