open-vault/builtin/logical/transit
Matt Schultz 611ab91e5a
Transit byok import endpoints (#15414)
* add import endpoint

* fix unlock

* add import_version

* refactor import endpoints and add tests

* add descriptions

* Update dependencies to include tink for Transit import operations. Convert Transit wrapping key endpoint to use shared wrapping key retrieval method. Disallow import of convergent keys to Transit via BYOK process.

* Include new 'hash_function' parameter on Transit import endpoints to specify OAEP random oracle hash function used to wrap ephemeral AES key.

* Add default values for Transit import endpoint fields. Prevent an OOB panic in Transit import. Proactively zero out ephemeral AES key used in Transit imports.

* Rename some Transit BYOK import variables. Ensure Transit BYOK ephemeral key is of the size specified byt the RFC.

* Add unit tests for Transit BYOK import endpoint.

* Simplify Transit BYOK import tests. Add a conditional on auto rotation to avoid errors on BYOK keys with allow_rotation=false.

* Added hash_function field to Transit import_version endpoint. Reworked Transit import unit tests. Added unit tests for Transit import_version endpoint.

* Add changelog entry for Transit BYOK.

* Transit BYOK formatting fixes.

* Omit 'convergent_encryption' field from Transit BYOK import endpoint, but reject with an error when the field is provided.

* Minor formatting fix in Transit import.

Co-authored-by: rculpepper <rculpepper@hashicorp.com>
2022-05-16 11:50:38 -05:00
..
cmd/transit
backend.go Transit byok import endpoints (#15414) 2022-05-16 11:50:38 -05:00
backend_test.go Cleanup bool checks (#14102) 2022-02-18 07:35:53 -07:00
path_backup.go
path_backup_test.go
path_cache_config.go reformat using 'make fmt' (#13794) 2022-01-27 10:06:34 -08:00
path_cache_config_test.go reformat using 'make fmt' (#13794) 2022-01-27 10:06:34 -08:00
path_config.go Revert "MFA (#14049)" (#14135) 2022-02-17 13:17:59 -07:00
path_config_test.go Revert the WithContext changes to vault tests (#14947) 2022-04-07 15:12:58 -04:00
path_datakey.go reformat using 'make fmt' (#13794) 2022-01-27 10:06:34 -08:00
path_decrypt.go Check that all required fields in Transit API are present. (#14074) 2022-02-22 16:00:25 -05:00
path_decrypt_bench_test.go
path_decrypt_test.go
path_encrypt.go Use FieldData.GetOkError() to access required Transit parameters. (#14593) 2022-03-18 16:10:38 -04:00
path_encrypt_bench_test.go
path_encrypt_test.go Use FieldData.GetOkError() to access required Transit parameters. (#14593) 2022-03-18 16:10:38 -04:00
path_export.go
path_export_test.go
path_hash.go Use FieldData.GetOkError() to access required Transit parameters. (#14593) 2022-03-18 16:10:38 -04:00
path_hash_test.go Use FieldData.GetOkError() to access required Transit parameters. (#14593) 2022-03-18 16:10:38 -04:00
path_hmac.go Adds support for SHA-3 to transit (#13367) 2021-12-08 12:29:33 -06:00
path_hmac_test.go Adds support for SHA-3 to transit (#13367) 2021-12-08 12:29:33 -06:00
path_import.go Transit byok import endpoints (#15414) 2022-05-16 11:50:38 -05:00
path_import_test.go Transit byok import endpoints (#15414) 2022-05-16 11:50:38 -05:00
path_keys.go Transit byok import endpoints (#15414) 2022-05-16 11:50:38 -05:00
path_keys_test.go Revert the WithContext changes to vault tests (#14947) 2022-04-07 15:12:58 -04:00
path_random.go Fix fmt error (#15266) 2022-05-03 10:07:23 -04:00
path_random_test.go Allow callers to choose the entropy source for the random endpoints. (#15213) 2022-05-02 14:42:07 -05:00
path_restore.go
path_restore_test.go
path_rewrap.go reformat using 'make fmt' (#13794) 2022-01-27 10:06:34 -08:00
path_rewrap_test.go
path_rotate.go
path_sign_verify.go Adds support for SHA-3 to transit (#13367) 2021-12-08 12:29:33 -06:00
path_sign_verify_test.go Adds support for SHA-3 to transit (#13367) 2021-12-08 12:29:33 -06:00
path_trim.go Use FieldData.GetOkError() to access required Transit parameters. (#14593) 2022-03-18 16:10:38 -04:00
path_trim_test.go Check that all required fields in Transit API are present. (#14074) 2022-02-22 16:00:25 -05:00
path_wrapping_key.go Transit byok import endpoints (#15414) 2022-05-16 11:50:38 -05:00
path_wrapping_key_test.go Add Transit BYOK wrapping key endpoint (#15271) 2022-05-11 11:28:32 -05:00
stepwise_test.go Cleanup bool checks (#14102) 2022-02-18 07:35:53 -07:00