3 ms·

Bitwarden Secrets Manager now generally available

69 points by seized 3y ago

seized 3y ago
BitWarden Secrets Manager is now GA. Sadly no self hosting until the $12/month tier but still very exciting! https://bitwarden.com/products/secrets-manager/#pricing https://bitwarden.com/products/secrets-manager/#pricing
- danmur 3y ago
  It's weird that it's open source, but you can't self-host it unless you pay. How does that work? "Today, Bitwarden announces the general availability of Bitwarden Secrets Manager, an open source, end-to-end encrypted solution that empowers development teams to easily store, manage, automate, and share secrets at scale."
  - Kab1r 3y ago
    It's not open source; it's under a different license unlike the rest of bitwarden which is GPL
  - cognomano 3y ago
    At least part of the source code seems to be here: <https://github.com/bitwarden/server/tree/master/src/Core/SecretsManager https://github.com/bitwarden/server/tree/master/src/Core/Sec...>. The license is not clear to me: is the Secret Manager a “Bitwarden server”, or is it “Commercial.Core”? <https://github.com/bitwarden/server/blob/master/LICENSE_FAQ.md https://github.com/bitwarden/server/blob/master/LICENSE_FAQ....>. I hope Bitwarden don’t follow the recent “open source but only if you pay and we unilaterally terminate the contract with you if you exercise the terms of the open source license” approach RedHat is doing lately.
  - Aicy 3y ago
    I'm confused since I self host vaultwarden and it works great, what is bitwarden adding?
    - zebracanevra 3y ago
      And it also seems like vaultwarden has no interest in implementing the functionality? I don't get why they don't do a clean-room implementation if they're so worried about licenses.. https://github.com/dani-garcia/vaultwarden/discussions/3368 https://github.com/dani-garcia/vaultwarden/discussions/3368
      - jacooper 3y ago
        But vaultwarden is a full reimplementation anyway?
        cpach 3y ago
        Vaultwarden does not implement the secrets manager. It does implement the password manager. Vaultwarden does not have 100% of all the features that Bitwarden has. To name an example, SSO is missing: https://github.com/dani-garcia/vaultwarden/pull/3154 https://github.com/dani-garcia/vaultwarden/pull/3154
      - nucleardog 3y ago
        I imagine the issue is maybe more on the UI end. If the UI isn't included in the open source offering, then vaultwarden is going to need to build it out themselves. Their reply mentions it's not in the open source web vault. This aligns with some of the enterprise policies that they've not implemented, in their wiki they're called out for the UI not being open source.
COGlory 3y ago
Somewhat sad to see this isn't open source. I hope that Bitwarden isn't regretting their decision to open source their password manager. I self host Vaultwarden, but intentionally purchase a full license from Bitwarden every year, as do a couple other folks I know.
elashri 3y ago
I think the source might be here [1]. And this repo (clients) have this LICENCE.md file [2] which says that > Source code in this repository is covered by one of two licenses: (i) the GNU General Public License (GPL) v3.0 (ii) the Bitwarden License v1.0. The default license throughout the repository is GPL v3.0 unless the header specifies another license. Bitwarden Licensed code is found only in the /bitwarden_license directory Now the secret manager is in the `bitwarden_license` directory so it is not a GPL covered product and not open source but covered by BITWARDEN LICENSE AGREEMENT [3]. It does not allow you to use it as OSS. [1] https://github.com/bitwarden/clients/tree/master/bitwarden_license/bit-web/src/app https://github.com/bitwarden/clients/tree/master/bitwarden_l... [2] https://github.com/bitwarden/clients/blob/master/LICENSE.txt https://github.com/bitwarden/clients/blob/master/LICENSE.txt [3] https://github.com/bitwarden/clients/blob/master/LICENSE_BITWARDEN.txt https://github.com/bitwarden/clients/blob/master/LICENSE_BIT...
deleted 3y ago
[deleted]

69 points by seized 3y ago

BitWarden Secrets Manager is now GA. Sadly no self hosting until the $12/month tier but still very exciting! https://bitwarden.com/products/secrets-manager/#pricing https://bitwarden.com/products/secrets-manager/#pricing

danmur 3y ago
It's weird that it's open source, but you can't self-host it unless you pay. How does that work? "Today, Bitwarden announces the general availability of Bitwarden Secrets Manager, an open source, end-to-end encrypted solution that empowers development teams to easily store, manage, automate, and share secrets at scale."
- Kab1r 3y ago
  It's not open source; it's under a different license unlike the rest of bitwarden which is GPL
- cognomano 3y ago
  At least part of the source code seems to be here: <https://github.com/bitwarden/server/tree/master/src/Core/SecretsManager https://github.com/bitwarden/server/tree/master/src/Core/Sec...>. The license is not clear to me: is the Secret Manager a “Bitwarden server”, or is it “Commercial.Core”? <https://github.com/bitwarden/server/blob/master/LICENSE_FAQ.md https://github.com/bitwarden/server/blob/master/LICENSE_FAQ....>. I hope Bitwarden don’t follow the recent “open source but only if you pay and we unilaterally terminate the contract with you if you exercise the terms of the open source license” approach RedHat is doing lately.
- Aicy 3y ago
  I'm confused since I self host vaultwarden and it works great, what is bitwarden adding?
  - zebracanevra 3y ago
    And it also seems like vaultwarden has no interest in implementing the functionality? I don't get why they don't do a clean-room implementation if they're so worried about licenses.. https://github.com/dani-garcia/vaultwarden/discussions/3368 https://github.com/dani-garcia/vaultwarden/discussions/3368
    - jacooper 3y ago
      But vaultwarden is a full reimplementation anyway?
      - cpach 3y ago
        Vaultwarden does not implement the secrets manager. It does implement the password manager. Vaultwarden does not have 100% of all the features that Bitwarden has. To name an example, SSO is missing: https://github.com/dani-garcia/vaultwarden/pull/3154 https://github.com/dani-garcia/vaultwarden/pull/3154
    - nucleardog 3y ago
      I imagine the issue is maybe more on the UI end. If the UI isn't included in the open source offering, then vaultwarden is going to need to build it out themselves. Their reply mentions it's not in the open source web vault. This aligns with some of the enterprise policies that they've not implemented, in their wiki they're called out for the UI not being open source.

COGlory 3y ago

Somewhat sad to see this isn't open source. I hope that Bitwarden isn't regretting their decision to open source their password manager. I self host Vaultwarden, but intentionally purchase a full license from Bitwarden every year, as do a couple other folks I know.

elashri 3y ago

I think the source might be here [1]. And this repo (clients) have this LICENCE.md file [2] which says that > Source code in this repository is covered by one of two licenses: (i) the GNU General Public License (GPL) v3.0 (ii) the Bitwarden License v1.0. The default license throughout the repository is GPL v3.0 unless the header specifies another license. Bitwarden Licensed code is found only in the /bitwarden_license directory Now the secret manager is in the `bitwarden_license` directory so it is not a GPL covered product and not open source but covered by BITWARDEN LICENSE AGREEMENT [3]. It does not allow you to use it as OSS. [1] https://github.com/bitwarden/clients/tree/master/bitwarden_license/bit-web/src/app https://github.com/bitwarden/clients/tree/master/bitwarden_l... [2] https://github.com/bitwarden/clients/blob/master/LICENSE.txt https://github.com/bitwarden/clients/blob/master/LICENSE.txt [3] https://github.com/bitwarden/clients/blob/master/LICENSE_BITWARDEN.txt https://github.com/bitwarden/clients/blob/master/LICENSE_BIT...

deleted 3y ago

[deleted]