hashicorp/vault on Hacker News

This is, but is still limited by their license: https://github.com/hashicorp/vault

comment by Izmaki · 2026-10-30 · in We're releasing the weights of Mistral Large 4

…guns and IBM's legal team < https://repo1.dso.mil/big-bang/product/packages/vault/-/blob... > vs < https://github.com/hashicorp/vault/blob/v1.20.2/LICENSE >. I guess to their credit, they do say at the top "licensing is complicated" but…

comment by mdaniel · 2025-08-29 · in The Deletion of Docker.io/Bitnami

…following the flow of code and what exactly is being checked is pretty straightforward (see e.g. https://github.com/hashicorp/vault/blob/main/vault/request_h... which was mentioned in the article)

comment by Cthulhu_ · 2025-08-07 · in Zero-day flaws in authentication, identity, authorization in HashiCorp Vault

…the dropdown :( OpenBao: https://github.com/openbao/openbao/graphs/contributors?from=... Vault: https://github.com/hashicorp/vault/graphs/contributors?from=...

comment by sevg · 2025-05-30 · in OpenBao Namespaces

…improvements to Vault like recursive keys ( https://github.com/openbao/openbao/issues/549 -- in https://github.com/hashicorp/vault/issues/5275 , the first-most upvoted issue), list filtering ( https://github.com/openbao/openbao/issues/769…

comment by cipherboy · 2024-12-02 · in Announcing OpenBao v2.1.0 - OSI-licensed fork of HashiCorp Vault

…the instances themselves do not have any identity 1: https://docs.hetzner.cloud/#server-metadata 2: https://github.com/hashicorp/vault/blob/v1.14.7/website/cont...

comment by mdaniel · 2024-09-26 · in Ask HN: What tools should I use to manage secrets from env files?

…addresses the offboarding scenario much better than having to reconcile evicting those same keys: https://github.com/hashicorp/vault/blob/v1.12.11/website/con... and while digging up that link I also discovered that Vault will allegedly do…

comment by mdaniel · 2024-09-13 · in Does your startup need complex cloud infrastructure?

…what I use for personal projects since Vault is overkill. [0] https://github.com/asdf-vm/asdf [1] https://github.com/hashicorp/vault [2] https://www.passwordstore.org/

comment by prophesi · 2024-08-29 · in Ask HN: Developer PC setup automations for company owned devices

…https://developer.hashicorp.com/vault/tutorials/secrets-mana... https://github.com/hashicorp/vault : > Refer to Build Certificate Authority (CA) in Vault with an offline Root for an example of using a root CA external to V

comment by westurner · 2023-11-01 · in Show HN: Anchor – developer-friendly private CAs for internal TLS

…anyone does start an open Vault fork, I'd be interested in contributing as I get time. Edit to add: https://github.com/hashicorp/vault/graphs/contributors?from=...

comment by cipherboy · 2023-10-08 · in Homebrew to deprecate and add caveat for HashiCorp

…an old version of the vault code using field arithmetic that doesn't run in constant time. [0]: https://github.com/hashicorp/vault/blob/main/shamir/shamir.g...

comment by d-z-m · 2023-09-16 · in Horcrux: Split your file into encrypted fragments

Vault is under the BSL now too: https://github.com/hashicorp/vault/blob/main/LICENSE

comment by ArchOversight · 2023-08-31 · in The Terraform Registry Terms of Service have been updated

Out of curiosity, what do you mean by this? cross-cluster? they already have HA: https://github.com/hashicorp/vault/blob/v1.14.1/website/cont... while digging up that link, I also saw one named replication:…

comment by mdaniel · 2023-08-25 · in OpenTF announces fork of Terraform

https://github.com/hashicorp/vault/blob/main/LICENSE#L8-L11 Clearly states that you can use it in a production setup.

comment by ednxzu · 2023-08-11 · in HashiCorp adopts Business Source License

Maybe we'll see the whole team at [Axiom]( https://github.com/hashicorp/vault/blob/0b12cdcfd17278d7cca2... ) riding around in Maseratis.

comment by Coryodaniel · 2023-08-11 · in HashiCorp adopts Business Source License

> edit, 2015, ouch: > https://github.com/hashicorp/vault/commits?author=andrewstua... Not sure what you're getting at with your edit. I'll try to assume positive intent. I maintain quite a few projects as well, also pretty small. Code to…

comment by andrewstuart2 · 2023-08-11 · in HashiCorp adopts Business Source License

…in most cases I would much prefer a monetary contribution than a pull request. edit, 2015, ouch: https://github.com/hashicorp/vault/commits?author=andrewstua...

comment by 38 · 2023-08-11 · in HashiCorp adopts Business Source License

Also, "What if their dependencies adopted the same attitude?" Like https://github.com/hashicorp/vault/blob/main/go.mod#L25

comment by Macha · 2023-08-11 · in HashiCorp adopts Business Source License

…to change across versions. [0] https://realmhelm.com [1] https://github.com/ktbyers/netmiko [2] https://github.com/hashicorp/vault [3] https://github.com/google/textfsm

comment by dvno42 · 2023-07-03 · in Automate Your Network

Note that dumping the Vault's process memory is beyond hashicorp/Vault's threat model. See: https://github.com/hashicorp/vault/issues/1446#issuecomment-... I'm bringing this up because the circleCI blogpost says that the attacker did…

comment by komuW · 2023-01-15 · in CircleCI says hackers stole encryption keys and customers’ source code

Note that dumping the Vault's process memory is beyond hashicorp/Vault's threat model. See: https://github.com/hashicorp/vault/issues/1446#issuecomment-...

comment by komuW · 2023-01-15 · in CircleCI says hackers stole encryption keys and customers’ source code

…with the path to split path to mount point and secret. vault cli itself follows the same logic: https://github.com/hashicorp/vault/blob/main/command/kv_help...

comment by jamhed · 2022-08-31 · in HashiCorp’s multi-product strategy

…of encryption + service hosting? I believe they have a hosted SaaS solution now, but Vault is FOSS: https://github.com/hashicorp/vault >I don't see how this is much different than any of the other options out there. Vault manages your…

comment by YATA0 · 2022-04-01 · in Seriously, Stop Using RSA (2019)

▲ 1

Hashicorp Vault – Encryption as a service, Secrets- and Access management

story by punnerud · 2021-10-02 · 0 comments

Many people have experience using Vault, it was first released in 2015 https://github.com/hashicorp/vault/blob/master/CHANGELOG.md

comment by thinkmassive · 2021-09-02 · in Improving Git protocol security on GitHub

…to reboot. FYI: Hashicorp vault just uses Shamir's Secret Sharing scheme under the hood: https://github.com/hashicorp/vault/blob/45b9f7c1a53506dc9722...

comment by up_and_up · 2020-06-02 · in Ask HN: How does your company manage its encryption keys?

▲ 1

Vaultproject.io as an Acme CA

story by marcofranssen · 2020-04-07 · 0 comments

…nothing stopping you from forking the project and adding all the enterprise functionality you want. https://github.com/hashicorp/vault/blob/master/LICENSE

comment by jjeaff · 2020-01-24 · in Google Cloud’s Secrets Manager

▲ 4

GitHub – hashicorp/vault: A tool for secrets management, encryption as a service

story by axiomdata316 · 2019-10-14 · 0 comments

…work, I once built a terminal UI for Vault. Did not get any attention at all. Works wonders for me: https://github.com/hashicorp/vault/pull/6108

comment by dennis-tra · 2019-10-08 · in An Interactive HashiCorp Vault Shell

▲ 2

Hashicorp Vault: Secrets management, encryption as a service

story by yarapavan · 2019-03-20 · 0 comments

…to use your own internal PKI, not to use wildcard certs. See: https://github.com/cloudflare/cfssl https://github.com/hashicorp/vault https://github.com/smallstep/certificates

comment by mmalone · 2019-03-10 · in Using Let's Encrypt for Internal Servers (2018)

…describes isn’t easy. Using something like cfssl ( https://github.com/cloudflare/cfssl ) or vault ( https://github.com/hashicorp/vault ) or step certificates ( https://github.com/smallstep/certificates ) (which I work on) is probably…

comment by mmalone · 2019-03-10 · in Using Let's Encrypt for Internal Servers (2018)

▲ 1

Vault: A tool for secrets management, encryption as a service, access management

story by kumaranvpl · 2019-02-13 · 0 comments

▲ 6

Vault: tool for secrets management, encryption as a service

story by theBashShell · 2019-01-22 · 0 comments

▲ 2

Hashicorp Vault adds FoundationDB as a storage option

story by manigandham · 2018-07-29 · 0 comments

…is a popular request and Hashicorp has some "vague plans" which is an improvement from "no plans." https://github.com/hashicorp/vault/issues/1364#issuecomment-... Plus you get a full REST API, a ton of auth methods, granular access…

comment by mikeokner · 2017-11-27 · in Strongbox: a secret manager for AWS

How does SecretBox compare with Vault [0] or BlackBox [1]? [0] https://github.com/hashicorp/vault [1] https://github.com/stackexchange/blackbox

comment by 0xmohit · 2017-11-27 · in Strongbox: a secret manager for AWS

It baffles me that nobody seems to have mentioned Hashicorp's Vault yet: https://www.vaultproject.org https://github.com/hashicorp/vault It comes with both, a full blown PKI (want a new cert? Use an authenticated REST endpoint!) and SSH…

comment by mheiber · 2017-05-12 · in Ask HN: How do you manage SSH keys and SSL certificates in your company?

Hashicorp Vault seems to be locking all the memory: https://github.com/hashicorp/vault/blob/c44f1c9817955d4c7cd5... They also set the ipc_lock capability before starting the process in docker: https://github.com/hashicorp/docker-vault/blob/…

comment by zimbatm · 2017-04-23 · in Show HN: Securely Handle Encryption Keys in Go

Yes, but it's (reasonably) excluded from their threat model: https://github.com/hashicorp/vault/issues/1446#issuecomment-...

comment by cheeseprocedure · 2017-04-23 · in Show HN: Securely Handle Encryption Keys in Go

…additional drawback of the dynamic key method, and documented the lack of host key verification ( https://github.com/hashicorp/vault/commit/251da1bcdc27678fea... ). As we stated in our response to the reporter, "It isn’t something we want…

comment by mitchellh · 2017-04-15 · in Golang SSH Security

…) to establish verify an EC2 instance. We use ECS, and it doesn't play well with it - see https://github.com/hashicorp/vault/issues/1298 Instead, we would have had to fall back to the App ID method, which requires separate configuration,…

comment by alexsmolen · 2016-10-28 · in Secret Management with Vault

…and http://stackoverflow.com/questions/38579168/spring-boot-jdbc... -- see also, periodic tokens: https://github.com/hashicorp/vault/blob/master/website/sourc... I look forward to other answers though, if anyone's currently set this up. I…

comment by lstamour · 2016-10-28 · in Secret Management with Vault

…are fair number of open source alternatives that allow you to store secrets in the cloud: vault: https://github.com/hashicorp/vault blackbox: https://github.com/StackExchange/blackbox git-crypt: https://www.agwa.name/projects/git-crypt/…

comment by 0xmohit · 2016-07-27 · in LastPass autofill exploit

…that "all of your data will be saved in encrypted format in our Zero Knowledge [2] cloud". [0] https://github.com/hashicorp/vault [1] https://spideroak.com/solutions/encryptr [2] https://spideroak.com/features/zero-knowledge

comment by 0xmohit · 2016-07-27 · in LastPass autofill exploit

…such a purpose, like Hashicorp's Vault[0], so that you never have to keep a secret in the code. [0] https://github.com/hashicorp/vault

comment by jedberg · 2016-05-09 · in Git-secret – store private data in a Git repo

Read the source code: https://github.com/hashicorp/vault

comment by vially · 2015-04-28 · in Vault – A tool for managing secrets