diff --git a/changelogs/fragments/57272-fix-ansible-vault-whitelist-after-44320.yml b/changelogs/fragments/57272-fix-ansible-vault-whitelist-after-44320.yml new file mode 100644 index 00000000000..56121e49389 --- /dev/null +++ b/changelogs/fragments/57272-fix-ansible-vault-whitelist-after-44320.yml @@ -0,0 +1,2 @@ +bugfixes: + - Remove lingering ansible vault cipher (AES) after it beeing removed in #44320 diff --git a/lib/ansible/parsing/vault/__init__.py b/lib/ansible/parsing/vault/__init__.py index f4057f896ea..26c4f7884a7 100644 --- a/lib/ansible/parsing/vault/__init__.py +++ b/lib/ansible/parsing/vault/__init__.py @@ -82,7 +82,7 @@ display = Display() b_HEADER = b'$ANSIBLE_VAULT' -CIPHER_WHITELIST = frozenset((u'AES', u'AES256')) +CIPHER_WHITELIST = frozenset((u'AES256',)) CIPHER_WRITE_WHITELIST = frozenset((u'AES256',)) # See also CIPHER_MAPPING at the bottom of the file which maps cipher strings # (used in VaultFile header) to a cipher class @@ -288,6 +288,7 @@ def verify_secret_is_not_empty(secret, msg=None): class VaultSecret: '''Opaque/abstract objects for a single vault secret. ie, a password or a key.''' + def __init__(self, _bytes=None): # FIXME: ? that seems wrong... Unset etc? self._bytes = _bytes