[18.0][ADD] certificate_data_encryption: add module

[rvalyi]

assisted by glm-5.3

This module allows to store the passwords of the certificates and private keys managed by the core certificate module in an encrypted and per environment way (dev, staging, production), instead of clear text in the database.

It connects the core certificate module with the OCA server-env encryption mechanism (server_environment_data_encryption and data_encryption): the passwords become environment managed fields (server.env.mixin) whose values are stored encrypted in the encrypted.data table using a Fernet key per environment.

Covered fields:

• certificate.certificate.pkcs12_password
• certificate.key.password

Follow the configuration of the server_environment and server_environment_data_encryption modules:

• define running_env in the Odoo configuration file;

• define one Fernet key per environment in the [options] section, e.g. encryption_key_prod = ZZZ;

• generate the keys with: python -c 'from cryptography.fernet import Fernet; print(Fernet.generate_key())'.

The passwords are no longer stored in the certificate.certificate and certificate.key tables: they are set/changed from the forms (the screen shows which environment is being edited) and are stored encrypted in the encrypted.data table, per environment.

If no encryption key is configured for the current environment, the module has no effect (default behavior of
server_environment_data_encryption).