docs: clarify layered SSE-C key authentication

Signed-off-by: Feng Ruohang <rh@vonng.com>
This commit is contained in:
Feng Ruohang
2026-08-29 18:21:13 +08:00
parent c4fd97d0bf
commit 8448512a1f
2 changed files with 6 additions and 7 deletions
+3 -4
View File
@@ -508,10 +508,9 @@ func testAPICopyObjectSSECKeyRotationNullVersionWithCompression(obj ObjectLayer,
}
}
// TestAPICopyObjectSSECKeyRotationNullVersionWrongKey pins the source key
// authentication of the re-encrypting fallback. A zero byte source has no data
// to decrypt, so the copy would otherwise reach the destination write without
// ever proving the caller holds the current key.
// TestAPICopyObjectSSECKeyRotationNullVersionWrongKey pins source-key
// authentication in both the standalone rotation fix and the later zero-byte
// read hardening.
func TestAPICopyObjectSSECKeyRotationNullVersionWrongKey(t *testing.T) {
defer DetectTestLeak(t)()
ExecObjectLayerAPITest(ExecObjectLayerAPITestArgs{