Usage

go get github.com/ovh/kmip-go@latest

import ("github.com/ovh/kmip-go""github.com/ovh/kmip-go/kmipclient""github.com/ovh/kmip-go/payloads""github.com/ovh/kmip-go/ttlv")

const (ADDR="eu-west-rbx.okms.ovh.net:5696"CA="ca.pem"CERT="cert.pem"KEY="key.pem")client,err:=kmipclient.Dial(ADDR,// Optional if server's CA is known by the system// kmipclient.WithRootCAFile(CA),kmipclient.WithClientCertFiles(CERT,KEY),kmipclient.WithMiddlewares(kmipclient.CorrelationValueMiddleware(uuid.NewString),kmipclient.DebugMiddleware(os.Stdout,ttlv.MarshalXML),),// kmipclient.EnforceVersion(kmip.V1_4),)iferr!=nil {panic(err)}deferclient.Close()fmt.Println("Connected using KMIP version",client.Version())

resp:=client.Create().AES(256,kmip.CryptographicUsageEncrypt|kmip.CryptographicUsageDecrypt).WithName("my-key").MustExec()fmt.Println("Created AES key with ID",resp.UniqueIdentifier)

request:= payloads.CreateRequestPayload{ObjectType:kmip.ObjectTypeSymmetricKey,TemplateAttribute: kmip.TemplateAttribute{Attribute: []kmip.Attribute{{AttributeName:kmip.AttributeNameCryptographicAlgorithm,AttributeValue:kmip.CryptographicAlgorithmAES,}, {AttributeName:kmip.AttributeNameCryptographicLength,AttributeValue:int32(256),}, {AttributeName:kmip.AttributeNameName,AttributeValue: kmip.Name{NameType:kmip.NameTypeUninterpretedTextString,NameValue:"another-key",},}, {AttributeName:kmip.AttributeNameCryptographicUsageMask,AttributeValue:kmip.CryptographicUsageEncrypt|kmip.CryptographicUsageDecrypt,},},},}response,err:=client.Request(context.Background(),&request)iferr!=nil {panic(err)}id:=response.(*payloads.CreateResponsePayload).UniqueIdentifierfmt.Println("Created an AES key with ID",id)

batchResponse,err:=client.Batch(context.Background(),&request,&request)iferr!=nil {panic(err)}id1:=batchResponse[0].ResponsePayload.(*payloads.CreateResponsePayload).UniqueIdentifierid2:=batchResponse[1].ResponsePayload.(*payloads.CreateResponsePayload).UniqueIdentifierfmt.Println("Created 2 AES keys with IDs",id1,id2)

msg:=kmip.NewRequestMessage(client.Version(),&request,&request)rMsg,err:=client.Roundtrip(context.Background(),&msg)iferr!=nil {panic(err)}id1:=rMsg.BatchItem[0].ResponsePayload.(*payloads.CreateResponsePayload).UniqueIdentifierid2:=rMsg.BatchItem[1].ResponsePayload.(*payloads.CreateResponsePayload).UniqueIdentifierfmt.Println("Created a 5th and 6th AES keys with IDs",id1,id2)

Implementation status

Messages

Operations

Managed Objects

Base Objects

Transparent Key Structures

Attributes