stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity

part #2

Browse Source
This commit is contained in:
master
2026-02-04 19:59:20 +02:00
parent 557feefdc3
commit 5548cf83bf
1479 changed files with 53557 additions and 40339 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
src/__Libraries/__Tests/StellaOps.Cryptography.Kms.Tests/CloudKmsClientTests.CryptoProvider.cs
View File

@@ -1,3 +1,5 @@
using System;
using System.Collections.Generic;
using StellaOps.Cryptography;
using StellaOps.Cryptography.Kms;
using StellaOps.TestKit;
@@ -9,7 +11,7 @@ public sealed partial class CloudKmsClientTests
{
[Trait("Category", TestCategories.Unit)]
[Fact]
public void KmsCryptoProvider_Skips_NonExportable_Keys()
public void KmsCryptoProvider_Returns_VerificationOnly_Keys_When_PublicMaterial_Available()
{
using var fixture = new EcdsaFixture();
var parameters = fixture.Parameters;
@@ -28,6 +30,36 @@ public sealed partial class CloudKmsClientTests
provider.UpsertSigningKey(signingKey);
var keys = provider.GetSigningKeys();
var key = Assert.Single(keys);
Assert.Equal(signingKey.Reference.KeyId, key.Reference.KeyId);
Assert.Null(key.PrivateParameters.D);
Assert.NotNull(key.PublicParameters.Q.X);
Assert.NotNull(key.PublicParameters.Q.Y);
Assert.Equal(signingKey.Metadata["kms.version"], key.Metadata["kms.version"]);
}
[Trait("Category", TestCategories.Unit)]
[Fact]
public void KmsCryptoProvider_Skips_Keys_Without_PublicMaterial()
{
using var fixture = new EcdsaFixture();
var parameters = fixture.Parameters;
var kmsClient = new NonExportingKmsClient(parameters, FixedNow);
var provider = new KmsCryptoProvider(kmsClient);
var signingKey = new CryptoSigningKey(
new CryptoKeyReference("kms-key-no-public", "kms"),
KmsAlgorithms.Es256,
new byte[32],
FixedNow,
metadata: new Dictionary<string, string?>(StringComparer.OrdinalIgnoreCase)
{
["kms.version"] = "kms-key-no-public",
});
provider.UpsertSigningKey(signingKey);
var keys = provider.GetSigningKeys();
Assert.Empty(keys);
}