use pemutil. success

openstack-k8s-operators · Sep 17, 2024 · b46680b · b46680b
1 parent 92d3241
commit b46680b
Showing 1 changed file with 4 additions and 6 deletions.
diff --git a/pkg/octavia/amphora_certs.go b/pkg/octavia/amphora_certs.go
@@ -29,6 +29,7 @@ import (
 	"github.com/openstack-k8s-operators/lib-common/modules/common/helper"
 	"github.com/openstack-k8s-operators/lib-common/modules/common/secret"
 	octaviav1 "github.com/openstack-k8s-operators/octavia-operator/api/v1beta1"
+	"go.step.sm/crypto/pemutil"
 	corev1 "k8s.io/api/core/v1"
 	k8serrors "k8s.io/apimachinery/pkg/api/errors"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
@@ -60,12 +61,9 @@ func generateKey(passphrase []byte) (*rsa.PrivateKey, []byte, error) {
 
 	var pemBlock *pem.Block
 	if passphrase != nil {
-		pemBlock, err = EncryptPEMBlock(
-			rand.Reader,
-			"PRIVATE KEY",
-			pkcs8Key,
-			passphrase,
-			PEMCipherAES128)
+		pemBlock, err = pemutil.EncryptPKCS8PrivateKey(
+			rand.Reader, pkcs8Key, passphrase, pemutil.DefaultEncCipher,
+		)
 		if err != nil {
 			err = fmt.Errorf("Error encrypting private key: %w", err)
 			return priv, nil, err