mirror of
https://github.com/OpenKMIP/PyKMIP.git
synced 2025-07-16 18:44:23 +02:00
d263302077
This change updates the Get unit demo, adding support for: * the additional display of key-related objects * the passing of more arguments to the client (e.g., KeyFormatType) * the retrieval of Public/PrivateKeys
85 lines
3.2 KiB
Python
85 lines
3.2 KiB
Python
# Copyright (c) 2014 The Johns Hopkins University/Applied Physics Laboratory
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from kmip.core.enums import AttributeType
|
|
from kmip.core.enums import CredentialType
|
|
from kmip.core.enums import CryptographicAlgorithm
|
|
from kmip.core.enums import CryptographicUsageMask
|
|
from kmip.core.enums import KeyFormatType
|
|
from kmip.core.enums import ObjectType
|
|
|
|
from kmip.core.factories.attributes import AttributeFactory
|
|
from kmip.core.factories.credentials import CredentialFactory
|
|
from kmip.core.factories.secrets import SecretFactory
|
|
|
|
from kmip.core.objects import TemplateAttribute
|
|
|
|
from kmip.services.kmip_client import KMIPProxy
|
|
|
|
import logging
|
|
import os
|
|
|
|
if __name__ == '__main__':
|
|
f_log = os.path.join(os.path.dirname(__file__), '..', 'logconfig.ini')
|
|
logging.config.fileConfig(f_log)
|
|
logger = logging.getLogger(__name__)
|
|
|
|
attribute_factory = AttributeFactory()
|
|
credential_factory = CredentialFactory()
|
|
secret_factory = SecretFactory()
|
|
|
|
credential_type = CredentialType.USERNAME_AND_PASSWORD
|
|
credential_value = {'Username': 'Peter', 'Password': 'abc123'}
|
|
credential = credential_factory.create_credential(credential_type,
|
|
credential_value)
|
|
client = KMIPProxy()
|
|
client.open()
|
|
|
|
object_type = ObjectType.SYMMETRIC_KEY
|
|
algorithm_value = CryptographicAlgorithm.AES
|
|
|
|
mask_flags = [CryptographicUsageMask.ENCRYPT,
|
|
CryptographicUsageMask.DECRYPT]
|
|
attribute_type = AttributeType.CRYPTOGRAPHIC_USAGE_MASK
|
|
usage_mask = attribute_factory.create_attribute(attribute_type,
|
|
mask_flags)
|
|
attributes = [usage_mask]
|
|
template_attribute = TemplateAttribute(attributes=attributes)
|
|
|
|
secret_features = {}
|
|
|
|
key_format_type = KeyFormatType.RAW
|
|
secret_features.update([('key_format_type', key_format_type)])
|
|
|
|
# TODO (peter-hamilton) Replace with calls to crypto libraries
|
|
key_data = {'bytes': bytearray(b'\x00\x00\x00\x00\x00\x00\x00\x00'
|
|
b'\x00\x00\x00\x00\x00\x00\x00\x00')}
|
|
|
|
secret_features.update([('key_value', key_data)])
|
|
secret_features.update([('cryptographic_algorithm', algorithm_value)])
|
|
secret_features.update([('cryptographic_length', 128)])
|
|
|
|
secret = secret_factory.create(object_type, secret_features)
|
|
|
|
result = client.register(object_type, template_attribute, secret,
|
|
credential)
|
|
client.close()
|
|
|
|
logger.debug('register() result status: {0}'.format(
|
|
result.result_status.enum))
|
|
logger.debug('registered UUID: {0}'.format(result.uuid.value))
|
|
logger.debug('registered template attribute: {0}'.
|
|
format(result.template_attribute))
|