Function TestMasterKey_Decrypt

hcvault/keysource_test.go:243–273

(t *testing.T)

}

func TestMasterKey_Decrypt(t *testing.T) {
	if testSkipDocker {
		return
	}

	key := NewMasterKey(testVaultAddress, testEnginePath, "decrypt")
	(Token(testVaultToken)).ApplyToMasterKey(key)
	assert.NoError(t, createVaultKey(key))

	client, err := vaultClient(key.VaultAddress, key.token, nil)
	assert.NoError(t, err)

	dataKey := []byte("the heart of a shrimp is located in its head")
	secret, err := client.Logical().Write(key.encryptPath(), encryptPayload(dataKey))
	assert.NoError(t, err)

	encryptedKey, err := encryptedKeyFromSecret(secret)
	assert.NoError(t, err)

	key.EncryptedKey = encryptedKey
	got, err := key.Decrypt()
	assert.NoError(t, err)
	assert.Equal(t, dataKey, got)

	key.EnginePath = "invalid"
	assert.Error(t, key.Encrypt(dataKey))

	key.EnginePath = testEnginePath
	key.token = ""
	assert.Error(t, key.Encrypt(dataKey))
}

func TestMasterKey_EncryptDecrypt_RoundTrip(t *testing.T) {
	if testSkipDocker {