npm-cesium137-io

I'd be thrilled to see this in use in any capacity and now that you mention additional modules: I am also working on another vCenter-centric module to produce forged SAML...

The data-encipherment.key is used to encrypt secrets in exportable vSphere configs, such as customization specifications (https://kb.vmware.com/s/article/74963). Now that you mention it, this would be EXTREMELY useful in the context of,...

I'm getting excited about the potential of this module's ultimate form. I am going to re-write this and significantly refactor based on what I've learned from PR#16484 and some of...

Random thought: would an additional aux module be worthwhile, for processing this data offline and not necessarily post (think "hey I found a readable vCenter appliance backup repo")? We could...

I made progress: Step 1: Acquire the encipherment keys. You can grab these out of vecs-cli with ``` /usr/lib/vmware-vmafd/bin/vecs-cli entry getkey --store data-encipherment --alias data-encipherment > /tmp/data.key /usr/lib/vmware-vmafd/bin/vecs-cli entry getcert...

I know there is another vSphere secrets module in development and I'm still adding major functional portions to this, let me know if I should re-open this as a draft...

@ErikWynter Thanks, I will definitely take a look, esp. to see how you're dealing with all the potential special characters in the creds. Shell-escaping issues are the #1 bug I...

@ErikWynter I hit you up on Slack and also just pushed a commit RE: CVE-2022-22948 that adds code to decrypt the vpxuser credential using symkey.dat, feel free to use it...

@HynekPetrak thanks all this info - this is great stuff. I nearly fell over when I first found the lightwave git repo!

@ErikWynter this is really cool! I tested it against a couple instances including those with external PSC, and it ran fine / produced output, didn't die ungracefully with some whack...