1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
|
# pylint: disable=line-too-long,useless-suppression
# ------------------------------------
# Copyright (c) Microsoft Corporation.
# Licensed under the MIT License.
# ------------------------------------
import json
import pytest
from azure.keyvault.securitydomain.aio import SecurityDomainClient
from _shared.async_test_case import KeyVaultTestCase
from _async_test_case import ClientPreparer
from utils import get_certificate_info, write_security_domain, write_transfer_key
from wrapping import use_wrapping_keys
class TestSecurityDomain(KeyVaultTestCase):
@pytest.mark.asyncio
@pytest.mark.live_test_only
@ClientPreparer()
async def test_security_domain_download_and_upload(
self, client: SecurityDomainClient, upload_client: SecurityDomainClient, **kwargs
):
"""Test downloading a security domain and uploading it to another Managed HSM.
This test requires two Managed HSMs to be set up, one for downloading and one for uploading. The URL of the
first Managed HSM is specified in the environment variable AZURE_MANAGEDHSM_URL, and the second is specified
in SECONDARY_MANAGEDHSM_URL.
"""
# Load the certificate{x}.cer files from /resources and use them to download the security domain.
certs_object = get_certificate_info()
poller = await client.begin_download(certificate_info=certs_object, skip_activation_polling=True)
result = await poller.result()
status = await client.get_download_status()
assert status.status
assert status.status.lower() == "inprogress"
assert result.value
# Get the transfer key of the secondary HSM, and write it and the security domain to files.
key = await upload_client.get_transfer_key()
jwk = str(key.transfer_key)
transfer_key = json.loads(jwk)
write_transfer_key(transfer_key)
write_security_domain(result.value)
# Wrap the security domain using the certificate{x}.pem keys.
wrapped_security_domain = use_wrapping_keys()
# Upload the wrapped security domain to the secondary HSM.
poller = await upload_client.begin_upload(security_domain=wrapped_security_domain)
result = await poller.result()
assert result is None
status = await upload_client.get_upload_status()
assert status.status
assert status.status.lower() == "success"
|
