mirror of
https://github.com/OpenKMIP/PyKMIP.git
synced 2025-04-08 19:25:06 +02:00
751ae8e3b0
Secret Data (2.2.7) can now be registered Opaque Object (2.2.8) can now be registered This required the adding of a NONE type to the OpaqueDataType enum with the value of 0. This is not indicated by the standard but we needed some value to satisfy response decoding. Also fixed get demo This has been tested vs a HP Atalla ESKM HSM
70 lines
2.8 KiB
Python
70 lines
2.8 KiB
Python
# Copyright (c) 2014 The Johns Hopkins University/Applied Physics Laboratory
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from kmip.core.enums import AttributeType
|
|
from kmip.core.enums import CredentialType
|
|
from kmip.core.enums import ObjectType
|
|
from kmip.core.enums import CryptographicAlgorithm
|
|
from kmip.core.enums import CryptographicUsageMask
|
|
|
|
from kmip.core.factories.attributes import AttributeFactory
|
|
from kmip.core.factories.credentials import CredentialFactory
|
|
|
|
from kmip.core.objects import TemplateAttribute
|
|
|
|
from kmip.services.kmip_client import KMIPProxy
|
|
|
|
import logging
|
|
import os
|
|
|
|
if __name__ == '__main__':
|
|
f_log = os.path.join(os.path.dirname(__file__), '..', 'logconfig.ini')
|
|
logging.config.fileConfig(f_log)
|
|
logger = logging.getLogger(__name__)
|
|
|
|
attribute_factory = AttributeFactory()
|
|
credential_factory = CredentialFactory()
|
|
|
|
credential_type = CredentialType.USERNAME_AND_PASSWORD
|
|
credential_value = {'Username': 'Peter', 'Password': 'abc123'}
|
|
credential = credential_factory.create_credential(credential_type,
|
|
credential_value)
|
|
client = KMIPProxy()
|
|
client.open()
|
|
|
|
object_type = ObjectType.SYMMETRIC_KEY
|
|
attribute_type = AttributeType.CRYPTOGRAPHIC_ALGORITHM
|
|
algorithm = attribute_factory.create_attribute(attribute_type,
|
|
CryptographicAlgorithm.AES)
|
|
mask_flags = [CryptographicUsageMask.ENCRYPT,
|
|
CryptographicUsageMask.DECRYPT]
|
|
attribute_type = AttributeType.CRYPTOGRAPHIC_USAGE_MASK
|
|
usage_mask = attribute_factory.create_attribute(attribute_type,
|
|
mask_flags)
|
|
attributes = [algorithm, usage_mask]
|
|
template_attribute = TemplateAttribute(attributes=attributes)
|
|
|
|
result = client.create(object_type, template_attribute,
|
|
credential)
|
|
uuid = result.uuid.value
|
|
|
|
result = client.get(uuid=uuid, credential=credential)
|
|
client.close()
|
|
|
|
logger.debug('get() result status: {0}'.format(result.result_status.enum))
|
|
logger.debug('retrieved object type: {0}'.format(result.object_type.enum))
|
|
logger.debug('retrieved UUID: {0}'.format(result.uuid.value))
|
|
logger.debug('retrieved secret: {0}'.format(result.secret))
|