Run a test vector from a directory containing `manifest.toml` and step JSON files. This is the main entry point for vector-based regression tests. It

Start a test KMS server in a thread with the default options: No TLS, no certificate authentication. Configuration is loaded from `test_data/configs/

Convenience: load `auth_plain_owner.toml` patched with ctx port.

Parse a KMIP structure from its TTLV value. Note: `Objects` are untagged enums, so it is impossible to know the type of the Object unless the root va

Recover output logs from a command call `cmd` and re-inject it into stdio

Get a `Command` for the ckms binary, ensuring it's built first. Use this instead of `Command::cargo_bin(PROG_NAME)` directly.

Returns the `KeyBlock` of that object if any, an error otherwise

This operation requests that the server returns the Managed Object specified by its Unique Identifier. Only a single object is returned. The response

Find the key identifier `kid` in each registered JWKS

Creates a test application instance with KMIP and Google CSE capabilities. # Arguments `kms_public_url` - Optional public URL for the KMS server #

This operation requests the server to generate a new symmetric key or generate Secret Data as a Managed Cryptographic Object. The request contains inf

Deserialize the response body as JSON. # Errors Returns an error if the body is not valid JSON for type `T`.

Build a JWKS URI using `jwt_issuer_uri` and an optional `jwks_uri`.

Create a symmetric key via the CLI. `extra_args` are appended after `["sym", "keys", "create"]`. Pass `&[]` for defaults (AES-256).

Creates a new socket client connected to the test server. This will start the test server if it is not already running.

Run a ckms command with the given arguments and return stdout on success. This is the common pattern for all ckms binary tests: `Command::cargo_bin("

Insert a new object handle into the cache.

Returns the vendor identification string used for KMIP `VendorAttribute` operations.

List all the permissions granted to the user on an object

Serialize any KMIP request to a TTLV `JsValue` suitable for `sendKmipRequest()`. This replaces the repeated two-line suffix found in 70+ WASM binding

Build a `Create` request for a symmetric key

Get the object handle for the specified key.

Send a prepared HTTP request and collect the response. Retries once on a connection-level error (`is_connect()`), which occurs when hyper's connectio

`log_init(None)` + `test_app` combo — cuts 2-line boilerplate to 1 per test.

Create a symmetric key for the given algorithm

Read all bytes from a file # Errors If the file cannot be opened or read, an error is returned.

this API is meant to be polled

Returns the `Attributes` of that object if any, an error otherwise