Page History

...

1. The signature is generated using SHA1 and the PSK on the payloadmetadata, expires and postURL
2. Management server and SSVM machines should be in time sync for the verification to work work
3. On the SSVM agent, it first checks if the expires has crossed. 
4. It computes hash on payloadmetadata, expires and postURL using SHA1 and PSK and rejects the request if they do not match.
   
5. The postURL, expires and payload metadata returned from getUploadParams getUploadParamsForVolume/Template shouldn't be tampered by the user. Else, signature validation would fail.

Encryption and decryption of

...

'metadata'

The PSK will also be used to encrypt and decrypt the payload data metadata sent from the management server in the api response and received on the SSVM agent in the api request.

1. jasypt library with PBEWITHSHA1ANDDESEDE algorithm and the initial PSK will be used to encrypt and decrypt the payload datametadata.
2. Management server , encrypts the payload data using the method in 1 #1 and returns the ecrypted encrypted string in the response
3. SSVM Agent, after receiving the payloadmetadata, decrypts it using the method in 1 #1 and then does signature validation.

Unencrypted metadata

Sequence Diagram

Management server and SSVM agent interaction

...