Skip to content

Conversation

gkwang
Copy link
Contributor

@gkwang gkwang commented Aug 1, 2024

Description

Add test runs during PR merge.
Also updated the README on node version support.

References

Node 18 does not support triple des algorithm (listed as insecure) due to

TypeError: RSA_PKCS1_PADDING is no longer supported for private decryption, this can be reverted with --security-revert=CVE-2023-46809

@@ -2,7 +2,9 @@

W3C XML Encryption implementation for node.js (http://www.w3.org/TR/xmlenc-core/)

Supports node >= 12
Supports node >= 12 < 18

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We should address the Triple DES issues instead of dropping support for Node 18. We likely don't need to support that algorithm at all

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Agreed. This is more for backwards compatibility reasons. A drop in algorithm will require a major version bump.

lzychowski
lzychowski previously approved these changes Aug 5, 2024
@gkwang gkwang merged commit a08c621 into master Aug 5, 2024
8 checks passed
@gkwang gkwang deleted the fix-tests branch August 5, 2024 16:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants