Release/1.1.0 (#81)

* doc: add updated google key-pairs create command (#76)

* Update to new auth0 tokens (#77)

* Feat/secret data (#78)

* CLI create test

* update kms on 5.6.0 release

Author: ccorsin

CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to this project will be documented in this file.
 
+## [1.1.0] - 2025-07-23
+
+### 🚀 Features
+
+- Handle Secret Data
+
 ## [1.0.0] - 2025-07-08
 
 ### 🚀 Features

Cargo.lock

@@ -14,7 +14,7 @@ exclude = ["kms"]
 resolver = "2"
 
 [workspace.package]
-version = "1.0.0"
+version = "1.1.0"
 edition = "2024"
 rust-version = "1.85.0"
 authors = [
@@ -53,7 +53,7 @@ cosmian_crypto_core = { version = "10.1", default-features = false, features = [
     "ser",
 ] }
 cosmian_findex_cli = { path = "findex-server/crate/cli" }
-cosmian_kms_cli = { path = "kms/crate/cli", version = "5.3.3" }
+cosmian_kms_cli = { path = "kms/crate/cli", version = "5.6.0" }
 cosmian_http_client = "0.2"
 cosmian_logger = "0.2"
 der = { version = "0.7", default-features = false }

Cargo.toml

@@ -1,6 +1,6 @@
 FROM rust:1.79.0-buster AS builder
 
-LABEL version="1.0.0"
+LABEL version="1.1.0"
 LABEL name="Cosmian PKCS11 library container"
 
 ENV OPENSSL_DIR=/usr/local/openssl

Dockerfile

@@ -0,0 +1,3 @@
+[ v3_ca ]
+subjectKeyIdentifier=hash
+basicConstraints=critical,CA:TRUE

ca.ext

@@ -51,7 +51,7 @@ async fn test_get_attributes_p12() -> CosmianResult<()> {
         pkcs12_attributes
             .get(&Tag::KeyFormatType.to_string())
             .unwrap(),
-        &serde_json::json!("PKCS1")
+        &serde_json::json!("PKCS8")
     );
     let intermediate_certificate_id: String = serde_json::from_value(
         pkcs12_attributes

crate/cli/src/tests/kms/certificates/get_attributes.rs

@@ -10,6 +10,7 @@ mod hash;
 mod hsm;
 mod mac;
 mod rsa;
+mod secret_data;
 mod shared;
 mod symmetric;
 pub(crate) mod utils;

crate/cli/src/tests/kms/mod.rs

@@ -0,0 +1,86 @@
+use std::{collections::HashSet, process::Command};
+
+use assert_cmd::prelude::*;
+use cosmian_kms_cli::reexport::test_kms_server::start_default_test_kms_server;
+
+use crate::{
+    config::COSMIAN_CLI_CONF_ENV,
+    error::{CosmianError, result::CosmianResult},
+    tests::{
+        PROG_NAME,
+        kms::{
+            KMS_SUBCOMMAND,
+            utils::{extract_uids::extract_unique_identifier, recover_cmd_logs},
+        },
+        save_kms_cli_config,
+    },
+};
+
+#[derive(Default)]
+pub(crate) struct SecretDataOptions {
+    pub(crate) tags: HashSet<String>,
+    pub(crate) sensitive: bool,
+    pub(crate) key_id: Option<String>,
+}
+
+pub(crate) fn create_secret_data(
+    cli_conf_path: &str,
+    options: &SecretDataOptions,
+) -> CosmianResult<String> {
+    let mut cmd = Command::cargo_bin(PROG_NAME)?;
+    cmd.env(COSMIAN_CLI_CONF_ENV, cli_conf_path);
+
+    let mut args = vec!["secret-data", "create"];
+
+    // add tags
+    for tag in &options.tags {
+        args.push("--tag");
+        args.push(tag);
+    }
+    if options.sensitive {
+        args.push("--sensitive");
+    }
+    if let Some(key_id) = options.key_id.as_ref() {
+        args.push(key_id);
+    }
+    cmd.arg(KMS_SUBCOMMAND).args(args);
+
+    let output = recover_cmd_logs(&mut cmd);
+    if output.status.success() {
+        let secret_data_output = std::str::from_utf8(&output.stdout)?;
+        assert!(secret_data_output.contains("The secret data was successfully generated."));
+        let secret_data_id = extract_unique_identifier(secret_data_output)
+            .ok_or_else(|| CosmianError::Default("failed extracting the private key".to_owned()))?
+            .to_owned();
+        return Ok(secret_data_id)
+    }
+
+    Err(CosmianError::Default(
+        std::str::from_utf8(&output.stderr)?.to_owned(),
+    ))
+}
+
+#[tokio::test]
+pub(crate) async fn test_secret_data() -> CosmianResult<()> {
+    // from specs
+    let ctx = start_default_test_kms_server().await;
+    let (owner_client_conf_path, _) = save_kms_cli_config(ctx);
+    create_secret_data(
+        &owner_client_conf_path,
+        &SecretDataOptions {
+            tags: HashSet::from_iter(vec!["tag1".to_owned(), "tag2".to_owned()]),
+            ..Default::default()
+        },
+    )?;
+
+    let created_id = create_secret_data(
+        &owner_client_conf_path,
+        &SecretDataOptions {
+            key_id: Some("secret_id".to_owned()),
+            tags: HashSet::from_iter(vec!["tag1".to_owned(), "tag2".to_owned()]),
+            ..Default::default()
+        },
+    )?;
+    assert_eq!(created_id, "secret_id".to_owned());
+    Ok(())
+}

crate/cli/src/tests/kms/secret_data/create_secret.rs

@@ -0,0 +1 @@
+pub(crate) mod create_secret;

crate/cli/src/tests/kms/secret_data/mod.rs

@@ -155,9 +155,9 @@ async fn locate_objects(kms_rest_client: &KmsClient, tags: &[String]) -> Pkcs11R
         ..Default::default()
     };
     let response = kms_rest_client.locate(locate).await?;
-    debug!("Locate response: ids: {:?}", response.unique_identifiers);
+    debug!("Locate response: ids: {:?}", response.unique_identifier);
     let uniques_identifiers = response
-        .unique_identifiers
+        .unique_identifier
         .unwrap_or_default()
         .iter()
         .map(std::string::ToString::to_string)