cosmian_kms_cli 5.20.0

Command Line Interface used to manage the KMS server If any assistance is needed, please either visit the Cosmian technical documentation at https://docs.cosmian.com or contact the Cosmian support team on Discord https://discord.com/invite/7kPMNtHpnz
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87

use std::path::PathBuf;

use cosmian_kms_client::{
    kmip_2_1::kmip_types::{LinkType, Tag},
    reexport::cosmian_kms_client_utils::import_utils::CertificateInputFormat,
};
use cosmian_logger::{debug, log_init};
use test_kms_server::start_default_test_kms_server;

use crate::{
    actions::kms::{
        attributes::GetAttributesAction, certificates::import_certificate::ImportCertificateAction,
    },
    error::result::KmsCliResult,
};

#[tokio::test]
async fn test_get_attributes_p12() -> KmsCliResult<()> {
    log_init(option_env!("RUST_LOG"));
    // log_init(Some("info, kms=debug"));

    // Create a test server
    let ctx = start_default_test_kms_server().await;

    // import the certificate
    let imported_p12_sk_uid = Box::pin(
        ImportCertificateAction {
            certificate_file: Some(PathBuf::from(
                "../../test_data/certificates/csr/intermediate.p12",
            )),
            input_format: CertificateInputFormat::Pkcs12,
            pkcs12_password: Some("secret".to_owned()),
            certificate_id: Some("get_attributes_test_p12_cert".to_owned()),
            replace_existing: true,
            tags: vec!["import_pkcs12".to_owned()],
            ..Default::default()
        }
        .run(ctx.get_owner_client()),
    )
    .await?;

    // get the attributes of the private key and check that they are correct
    let pkcs12_attributes = GetAttributesAction {
        id: imported_p12_sk_uid.clone(),
        tags: None,
        attribute_tags: vec![Tag::KeyFormatType, Tag::LinkType],
        attribute_link_types: vec![],
        output_file: None,
    }
    .run(ctx.get_owner_client())
    .await?;

    debug!("pkcs12_attributes: {pkcs12_attributes:?}");
    assert!(!pkcs12_attributes.contains_key(&LinkType::PublicKeyLink.to_string()));
    assert_eq!(
        &pkcs12_attributes[&Tag::KeyFormatType.to_string()],
        &serde_json::json!("PKCS8")
    );
    let intermediate_certificate_id: String = serde_json::from_value(
        pkcs12_attributes[&LinkType::PKCS12CertificateLink.to_string()].clone(),
    )?;

    // get the attributes of the certificate and check that they are correct
    let intermediate_attributes = GetAttributesAction {
        id: Some(intermediate_certificate_id.clone()),
        tags: None,
        attribute_tags: vec![Tag::KeyFormatType, Tag::LinkType],
        attribute_link_types: vec![],
        output_file: None,
    }
    .run(ctx.get_owner_client())
    .await?;

    debug!("intermediate_attributes: {intermediate_attributes:?}");

    assert_eq!(
        &intermediate_attributes[&Tag::KeyFormatType.to_string()],
        &serde_json::json!("X509")
    );
    assert_eq!(
        &intermediate_attributes[&LinkType::PrivateKeyLink.to_string()],
        &serde_json::json!(imported_p12_sk_uid)
    );
    assert!(!intermediate_attributes.contains_key(&LinkType::CertificateLink.to_string()));

    Ok(())
}