Pure Dart core engine for the msgp2p delay-tolerant opportunistic mesh sync protocol. Changelog excerpt: - **KeyVault port**(proposal 0001, step 2; Discussion #10): `KeyVault`, `IdentitySeeds`, `KeyVaultLoad`, `MemoryKeyVault`(also `fromSeeds`), `KeyVaultCorruptedError`, `KeyVaultUnavailableError`. - **Store guard:** `guardStoreIdentity`refuses to let a node author when the store does not belong to the vault's identity (`UnsynchronizedIdentityException`: `storeEmpty`, `ownerMismatch`). - **Persistent author sequence:**the author's `seq`counter was kept in memory only and started again at 0 on every[...]

ALT: NCIS: Gibbs Slaps DiNozzo

External key management for Azure Key Vault Managed HSM is now generally available in all Azure public regions. For organizations with regulatory or sovereignty requirements to retain physical control of key-encryption keys, it lets Azure services that support customer-managed keys with Managed HSM use keys held in a customer-operated hardware security module (HSM) outside Microsoft infrastructure.

Azure keyvault integration with Kubernetes via a Flex Volume

Access an Azure Keyvault from a Microsoft hosted agent in Azure DevOps

This change also impacts `Exception while executing function: Order` · Issue #841 · shibayan/keyvault-acmebot · GitHub

Are you using a tool to get this certificate? I wasn't aware of Microsoft Azure using Let's Encrypt for certificates automatically and most people use a tool if they want a Let's Encrypt certificates. Others just use Microsoft provided certificates (I don't know who the CA for that is). For people that use Let's Encrypt certificates in azure they typically (to my knowledge) either: * populate a cert in KeyVault (using a tool to request the cert then push it to keyvault) then use that in their server * use a tool to get a certificate then apply it directly to the azure service (application gateway etc) There are many possible tools to do that, it just depends what you used.

webprofusion: > /var/lib/waagent/ You are possibly using something like this to fetch the cert from keyvault: learn.microsoft.com ### Azure Key Vault VM Extension for Linux - Azure Virtual Machines Deploy an agent performing automatic refresh of Key Vault certificates on virtual machines using a virtual machine extension. Or some terraform component. You could optional script the export and certificate conversion yourself.

webprofusion: > /var/lib/waagent/ You are possibly using something like this to fetch the cert from keyvault: learn.microsoft.com ### Azure Key Vault VM Extension for Linux - Azure Virtual Machines Deploy an agent performing automatic refresh of Key Vault certificates on virtual machines using a virtual machine extension. Or some terraform component. You could optional script the export and certificate conversion yourself.

Bharathk: > azurerm_key_vault_certificate `azurerm_key_vault_certificate` seems to update the certificate in keyvault, what process updates the certificate in the VM at `/var/lib/waagent/`? That's where you are losing details (keyvault will have your certificate, intermediates and key, the VM only has an export of the leaf cert and key). Have you downloaded the PFX directly from keyvault and inspected it to see if it does contain the intermediates (without converting it to component parts)?

My friend and Microsoft MVP David Wyatt recently asked me to provide him with an Azure Key Vault for...