nethsm 0.10.0

A high-level library to interact with the API of a Nitrokey NetHSM
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

//! Tests for NetHSM device locking.

use nethsm::test::{
    ADMIN_USER_ID,
    NAMESPACE1_ADMIN_USER_ID,
    NetHsmImage,
    UNLOCK_PASSPHRASE,
    nethsm_with_users,
};
use nethsm::{NetHsm, Passphrase, SystemState, UserId};
use rstest::rstest;
use rustainers::Container;
use testresult::TestResult;

#[rstest]
#[tokio::test]
async fn lock_and_unlock(
    #[future] nethsm_with_users: TestResult<(NetHsm, Container<NetHsmImage>)>,
) -> TestResult {
    let (nethsm, _container) = nethsm_with_users.await?;
    let namespace1_admin_user_id: UserId = NAMESPACE1_ADMIN_USER_ID.parse()?;
    let admin_user_id: UserId = ADMIN_USER_ID.parse()?;

    // N-Administrators can not lock
    nethsm.use_credentials(&namespace1_admin_user_id)?;
    assert_eq!(SystemState::Operational, nethsm.state()?);
    assert!(nethsm.lock().is_err());

    // R-Administrators can lock
    nethsm.use_credentials(&admin_user_id)?;
    assert_eq!(SystemState::Operational, nethsm.state()?);
    nethsm.lock()?;
    assert_eq!(SystemState::Locked, nethsm.state()?);

    // N-Administrators can unlock ?!
    nethsm.use_credentials(&namespace1_admin_user_id)?;
    nethsm.unlock(Passphrase::new(UNLOCK_PASSPHRASE.to_string()))?;
    assert_eq!(SystemState::Operational, nethsm.state()?);

    // R-Administrators can unlock
    nethsm.use_credentials(&admin_user_id)?;
    nethsm.lock()?;
    assert_eq!(SystemState::Locked, nethsm.state()?);
    nethsm.unlock(Passphrase::new(UNLOCK_PASSPHRASE.to_string()))?;
    assert_eq!(SystemState::Operational, nethsm.state()?);

    Ok(())
}