Function TestMasterKey_Encrypt

hcvault/keysource_test.go:188–218

(t *testing.T)

}

func TestMasterKey_Encrypt(t *testing.T) {
	if testSkipDocker {
		return
	}

	key := NewMasterKey(testVaultAddress, testEnginePath, "encrypt")
	(Token(testVaultToken)).ApplyToMasterKey(key)
	assert.NoError(t, createVaultKey(key))

	dataKey := []byte("the majority of your brain is fat")
	assert.NoError(t, key.Encrypt(dataKey))
	assert.NotEmpty(t, key.EncryptedKey)

	client, err := vaultClient(key.VaultAddress, key.token, nil)
	assert.NoError(t, err)

	payload := decryptPayload(key.EncryptedKey)
	secret, err := client.Logical().Write(key.decryptPath(), payload)
	assert.NoError(t, err)

	decryptedData, err := dataKeyFromSecret(secret)
	assert.NoError(t, err)
	assert.Equal(t, dataKey, decryptedData)

	key.EnginePath = "invalid"
	assert.Error(t, key.Encrypt(dataKey))

	key.EnginePath = testEnginePath
	key.token = ""
	assert.Error(t, key.Encrypt(dataKey))
}

func TestMasterKey_EncryptIfNeeded(t *testing.T) {
	if testSkipDocker {