CDCgov
Add Encryption for files sent to NATUS/LA
Problem statement
The files we are currently sending NATUS are encrypted on submission, but the files that NATUS place are not encrypted. NATUS wants extra encryptions on the message before sending on on the wire so they can manually decrypt it with the same key they provide us.
What you need to know
NATUS/LA proposes to give us the key to use for encryption. They want to rotate the key periodically and they will unencrypt in. Files should be Sha 512 AES. This would sit in the REST transport. To make it configurable, we need to add extra settings on the receiver transport settings.
Acceptance criteria
- [x] Uploaded files will be fully encrypted
- [ ] Testing complete
To do
- [ ] ...
Spoke with Flexion group yesterday, will likely prioritize this work above CA PHL. @ sprints away
ETOR told me to hold off on development for now until they tell to me continue.
Waiting on Flexion for response/action. Ott asked for help from Flexion to overcome an issue.
Contacted Natus to see if we can update the AES algorithm to a better one. I still wait for them to answer.
Waiting for DevOp to get ReportStream to resolve the api.neometrics.com (Natus REST server) DNS. Ticket: https://app.zenhub.com/workspaces/prime-devops-606cb208a8c112000fd48349/issues/gh/cdcgov/prime-devops/129
Slack: @John King
@Jorge Lopez
@pkendall
@victorchaparro
@Chris Kuryak (he/him) [ULE6] FYI: CDC resolved the issue regarding the LA-PHL domain name can't be found by ResportStream when RS tries to send an encrypted message. I checked the connection and sent the encrypted test message to LA-PHL.ETOR-NBS-ORDERS successfully.
