cosmian_kms_cli 5.20.0

Command Line Interface used to manage the KMS server If any assistance is needed, please either visit the Cosmian technical documentation at https://docs.cosmian.com or contact the Cosmian support team on Discord https://discord.com/invite/7kPMNtHpnz
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

use cosmian_kms_client::{
    KmsClient,
    cosmian_kmip::kmip_0::kmip_types::{RevocationReason, RevocationReasonCode},
    kmip_2_1::{kmip_types::UniqueIdentifier, requests::build_revoke_key_request},
};

use crate::{
    actions::kms::console,
    cli_bail,
    error::result::{KmsCliResult, KmsCliResultHelper},
};

pub(crate) async fn revoke(
    kms_rest_client: KmsClient,
    key_id: &str,
    revocation_reason: &str,
) -> KmsCliResult<UniqueIdentifier> {
    // Create the kmip query
    let revoke_query = build_revoke_key_request(
        key_id,
        RevocationReason {
            revocation_reason_code: RevocationReasonCode::Unspecified,
            revocation_message: Some(revocation_reason.to_owned()),
        },
    )?;

    // Query the KMS with your kmip data
    let revoke_response = kms_rest_client
        .revoke(revoke_query)
        .await
        .with_context(|| format!("revocation of key {} failed", &key_id))?;

    if key_id
        == revoke_response
            .unique_identifier
            .as_str()
            .context("the server did not return a key id as a string")?
    {
        let key_id = UniqueIdentifier::from(key_id);
        let mut stdout = console::Stdout::new("Successfully revoked the object.");
        stdout.set_unique_identifier(&key_id);
        stdout.write()?;

        Ok(key_id)
    } else {
        cli_bail!("Something went wrong when revoking the key.")
    }
}