Files
simplex-chat/scripts/ci/backend-state.crt
T
spacedandy-agents-simplex 65a8b7d2f5 ci: encrypt the test backend's keys that the Claude jobs carry over, to a key only those jobs hold
The iOS and desktop app jobs saved their stopped test backend (server keys and databases) as a public artifact, so that the Claude job could restart it with the same addresses: anyone signed in to GitHub could download it for a day and act as the test directory or relay while the Claude job ran.

backend-state.sh now packs it as CMS AuthEnvelopedData (AES-256-GCM, RSA-OAEP key transport) to the committed backend-state.crt; the Claude job decrypts it with the environment secret BACKEND_STATE_KEY, given only to that step, so the backend it restarts and the Claude session don't inherit it. Without the secret the Claude job stops at that step, before the Claude session.
2026-10-21 18:11:26 +00:00

31 lines
1.8 KiB
Plaintext

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----