corda / com.r3.corda.networkmanage.common.cryptoservice.azurekeyvault / AzureKeyVaultCryptoServiceTest

AzureKeyVaultCryptoServiceTest

class AzureKeyVaultCryptoServiceTest : CryptoServiceSpec<AzureKeyVaultCredentials, AzureKeyVaultKeyConfig>

These tests need to be run manually. They require an Amazon KeyVault (and the associated service principal) to be set up and will perform operations that are not free of charge.

Refer to https://docs.microsoft.com/en-gb/azure/key-vault/

This can be done using the scripts available under the resources folder. The only pre-requisites are:

To execute the tests:

  1. Navigate to resources/hsm-setup/azure and execute setup_resources.sh, which creates all the necessary Azure resources and resource files for the tests below.
  2. Run the tests.
  3. Once finished, navigate to resources/hsm-setup/azure and execute tear_down_resources.sh, which removes all the previously created Azure resources and local resource files.

Constructors

<init>

AzureKeyVaultCryptoServiceTest()

These tests need to be run manually. They require an Amazon KeyVault (and the associated service principal) to be set up and will perform operations that are not free of charge.

Inherited Properties

loggingContextRule

val loggingContextRule: <ERROR CLASS>

Functions

Generate P-256 ECDSA K1 key with hardware protection, sign and verify data

fun Generate P-256 ECDSA K1 key with hardware protection, sign and verify data(): Unit

createKeyConfig

fun createKeyConfig(alias: String): AzureKeyVaultKeyConfig

Method used to create a basic key config for a given alias.

delete

fun delete(alias: String): Unit

Method used to delete any keys created during the tests.

generateRandomKeyAlias

fun generateRandomKeyAlias(): String

getCryptoService

fun getCryptoService(): CryptoService<AzureKeyVaultCredentials, AzureKeyVaultKeyConfig>

Method used to retrieve the CryptoService that will be tested.

Inherited Functions

Content signer works with HsmX509Utilities

fun Content signer works with HsmX509Utilities(): Unit

Generate key, then sign and verify data

fun Generate key, then sign and verify data(): Unit

When key does not exist, getContentSigner should throw

fun When key does not exist, getContentSigner should throw(): Unit

When key does not exist, signing should throw

fun When key does not exist, signing should throw(): Unit