cosmian_kms_cli 5.19.0

Command Line Interface used to manage the KMS server If any assistance is needed, please either visit the Cosmian technical documentation at https://docs.cosmian.com or contact the Cosmian support team on Discord https://discord.com/invite/7kPMNtHpnz
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78

use std::path::PathBuf;

use cosmian_kms_client::reexport::cosmian_kms_client_utils::import_utils::CertificateInputFormat;
use test_kms_server::start_default_test_kms_server;
use uuid::Uuid;

use crate::{
    actions::kms::certificates::import_certificate::ImportCertificateAction,
    error::result::KmsCliResult,
};

#[tokio::test]
async fn test_certificate_import_different_format() -> KmsCliResult<()> {
    // Create a test server
    let ctx = start_default_test_kms_server().await;

    // import as TTLV JSON
    Box::pin(
        ImportCertificateAction {
            certificate_file: Some(PathBuf::from(
                "../../test_data/certificates/exported_certificate_ttlv.json",
            )),
            input_format: CertificateInputFormat::JsonTtlv,
            certificate_id: Some(Uuid::new_v4().to_string()),
            replace_existing: true,
            ..Default::default()
        }
        .run(ctx.get_owner_client()),
    )
    .await?;

    // import as PEM
    Box::pin(
        ImportCertificateAction {
            certificate_file: Some(PathBuf::from("../../test_data/certificates/ca.crt")),
            input_format: CertificateInputFormat::Pem,
            certificate_id: None,
            replace_existing: true,
            ..Default::default()
        }
        .run(ctx.get_owner_client()),
    )
    .await?;

    // import a chain
    Box::pin(
        ImportCertificateAction {
            certificate_file: Some(PathBuf::from(
                "../../test_data/certificates/mozilla_IncludedRootsPEM.txt",
            )),
            input_format: CertificateInputFormat::Chain,
            certificate_id: None,
            replace_existing: true,
            tags: vec!["import_chain".to_owned()],
            ..Default::default()
        }
        .run(ctx.get_owner_client()),
    )
    .await?;

    // import a PKCS12 - not supported in FIPS mode (PKCS12KDF is not FIPS-approved)
    #[cfg(feature = "non-fips")]
    Box::pin(
        ImportCertificateAction {
            certificate_file: Some(PathBuf::from("../../test_data/certificates/p12/output.p12")),
            input_format: CertificateInputFormat::Pkcs12,
            pkcs12_password: Some("secret".to_owned()),
            certificate_id: None,
            replace_existing: true,
            tags: vec!["import_pkcs12".to_owned()],
            ..Default::default()
        }
        .run(ctx.get_owner_client()),
    )
    .await?;

    Ok(())
}