replace openssl with rand crate

Author: adwk67

Cargo.lock

@@ -14,13 +14,14 @@ product-config = { git = "https://github.com/stackabletech/product-config.git",
 stackable-operator = { git = "https://github.com/stackabletech/operator-rs.git", features = ["telemetry", "versioned"], tag = "stackable-operator-0.95.0" }
 
 anyhow = "1.0"
+base64 = "0.22"
 built = { version = "0.8", features = ["chrono", "git2"] }
 clap = "4.5"
 const_format = "0.2"
 fnv = "1.0"
 futures = { version = "0.3", features = ["compat"] }
 indoc = "2.0"
-openssl = "0.10"
+rand = "0.9.0"
 rstest = "0.26"
 semver = "1.0"
 serde = { version = "1.0", features = ["derive"] }

Cargo.nix

@@ -13,12 +13,13 @@ product-config.workspace = true
 stackable-operator.workspace = true
 
 anyhow.workspace = true
+base64.workspace = true
 clap.workspace = true
 const_format.workspace = true
 fnv.workspace = true
 futures.workspace = true
 indoc.workspace = true
-openssl.workspace = true
+rand.workspace = true
 serde.workspace = true
 serde_json.workspace = true
 serde_yaml.workspace = true

Cargo.toml

@@ -478,7 +478,6 @@ pub async fn reconcile_airflow(
     create_random_secret(
         airflow.shared_internal_secret_name().as_ref(),
         ENV_INTERNAL_SECRET,
-        512,
         airflow,
         client,
     )
@@ -488,7 +487,6 @@ pub async fn reconcile_airflow(
     create_random_secret(
         airflow.shared_jwt_secret_name().as_ref(),
         ENV_JWT_SECRET,
-        512,
         airflow,
         client,
     )

rust/operator-binary/Cargo.toml

@@ -1,5 +1,6 @@
 use std::collections::BTreeMap;
 
+use base64::{Engine as _, engine::general_purpose};
 use snafu::{OptionExt, ResultExt, Snafu};
 use stackable_operator::{
     builder::meta::ObjectMetaBuilder, client::Client, k8s_openapi::api::core::v1::Secret,
@@ -54,12 +55,11 @@ pub enum Error {
 pub async fn create_random_secret(
     secret_name: &str,
     secret_key: &str,
-    secret_byte_size: usize,
     airflow: &v1alpha1::AirflowCluster,
     client: &Client,
 ) -> Result<()> {
     let mut internal_secret = BTreeMap::new();
-    internal_secret.insert(secret_key.to_string(), get_random_base64(secret_byte_size));
+    internal_secret.insert(secret_key.to_string(), get_random_base64());
 
     let secret = Secret {
         immutable: Some(true),
@@ -94,8 +94,8 @@ pub async fn create_random_secret(
     Ok(())
 }
 
-fn get_random_base64(byte_size: usize) -> String {
-    let mut buf: Vec<u8> = vec![0; byte_size];
-    openssl::rand::rand_bytes(&mut buf).unwrap();
-    openssl::base64::encode_block(&buf)
+fn get_random_base64() -> String {
+    let serial_number = rand::random::<u64>();
+    let bytes = serial_number.to_le_bytes();
+    general_purpose::STANDARD.encode(bytes)
 }