Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DRIVERS-2408 error if RewrapManyDataKey is called with libmongocrypt < 1.5.2 #1288

Merged
merged 8 commits into from Sep 9, 2022
12 changes: 10 additions & 2 deletions source/client-side-encryption/client-side-encryption.rst
Expand Up @@ -10,8 +10,8 @@ Client Side Encryption
:Status: Accepted
:Type: Standards
:Minimum Server Version: 4.2 (CSFLE), 6.0 (Queryable Encryption)
:Last Modified: 2022-06-30
:Version: 1.10.0
:Last Modified: 2022-07-29
:Version: 1.10.1

.. _lmc-c-api: https://github.com/mongodb/libmongocrypt/blob/master/src/mongocrypt.h.in

Expand Down Expand Up @@ -976,6 +976,13 @@ being created. If ``keyMaterial`` is given, the custom key material is used for
encrypting and decrypting data. Otherwise, the key material for the new data key
is generated from a cryptographically secure random device.

rewrapManyDataKey
-----------------

If applicable, drivers MUST document that users must upgrade dependencies if necessary to avoid being impacted by MONGOCRYPT-464.

If applicable, drivers MUST return an error if rewrapManyDataKey is called with libmongocrypt 1.5.1 or 1.5.0.

RewrapManyDataKeyOpts
---------------------

Expand Down Expand Up @@ -2387,6 +2394,7 @@ Changelog
:align: left

Date, Description
22-07-29, Prohibit ``rewrapManyDataKey`` with libmongocrypt <= 1.5.1.
22-06-30, Add behavior for automatic AWS credential loading in ``kmsProviders``.
22-06-29, Clarify bulk write operation expectations for ``rewrapManyDataKey()``.
22-06-27, Remove ``createKey``.
Expand Down