unseal

Documentation

Index

• Constants
• Variables
• type Status
  • func (s Status) String() string
• type Unseal
  • func Get() *Unseal
  • func (u *Unseal) CheckEngine(path string) (bool, error)
  • func (u *Unseal) DevMode(ctx context.Context) error
  • func (u *Unseal) GetKeyRing() *vault.Keyring
  • func (u *Unseal) Init(t int)
  • func (u *Unseal) Keyring(ctx context.Context) error
  • func (u *Unseal) Mount(ctx context.Context) (map[string]string, error)
  • func (u *Unseal) PostProcess(ctx context.Context, barrierPaths map[string]string) error
  • func (u *Unseal) SetBackend(b physical.Backend)
  • func (u *Unseal) SetDefaultEnginePath(path string)
  • func (u *Unseal) SetMasterKey(key []byte)
  • func (u *Unseal) SetSecurityBarrier(b vault.SecurityBarrier)
  • func (u *Unseal) Status() Status
  • func (u *Unseal) Storage(path string) logical.Storage
  • func (u *Unseal) Unseal(ctx context.Context, key string) (bool, error)

Constants

const (
	BarrierKeysPath = "core/hsm/barrier-unseal-keys"
)

Variables

var (
	ErrSealed = errors.New("operation not permitted, service is still sealed", errors.CodePkgCryptoUnsealSealed)
)

Types

type Status

type Status struct {
	TotalShares int
	Threshold   int
	Process     int
	Unsealed    bool
}

func (Status) String

func (s Status) String() string

type Unseal

type Unseal struct {
	Threshold   int
	TotalShares int

	SecurityBarrier vault.SecurityBarrier
	Backend         physical.Backend
	// contains filtered or unexported fields
}

func Get

func Get() *Unseal

func (*Unseal) CheckEngine

func (u *Unseal) CheckEngine(path string) (bool, error)

func (*Unseal) DevMode

func (u *Unseal) DevMode(ctx context.Context) error

func (*Unseal) GetKeyRing

func (u *Unseal) GetKeyRing() *vault.Keyring

func (*Unseal) Init

func (u *Unseal) Init(t int)

func (*Unseal) Keyring

func (u *Unseal) Keyring(ctx context.Context) error

Keyring is getting keyring from database and decrypt it with the master key

func (*Unseal) Mount

func (u *Unseal) Mount(ctx context.Context) (map[string]string, error)

Mount is mounting transit, getting the MountTable from database and decrypt it

func (*Unseal) PostProcess

func (u *Unseal) PostProcess(ctx context.Context, barrierPaths map[string]string) error

func (*Unseal) SetBackend

func (u *Unseal) SetBackend(b physical.Backend)

func (*Unseal) SetDefaultEnginePath

func (u *Unseal) SetDefaultEnginePath(path string)

func (*Unseal) SetMasterKey

func (u *Unseal) SetMasterKey(key []byte)

SetMasterKey is only for testing purpose

func (*Unseal) SetSecurityBarrier

func (u *Unseal) SetSecurityBarrier(b vault.SecurityBarrier)

func (*Unseal) Status

func (u *Unseal) Status() Status

func (*Unseal) Storage

func (u *Unseal) Storage(path string) logical.Storage

func (*Unseal) Unseal

func (u *Unseal) Unseal(ctx context.Context, key string) (bool, error)

First step to start the server