transit

Documentation

Index

• type Seal
  • func NewSeal(logger log.Logger) *Seal
  • func (s *Seal) Decrypt(_ context.Context, in *physical.EncryptedBlobInfo) ([]byte, error)
  • func (s *Seal) Encrypt(_ context.Context, plaintext []byte) (*physical.EncryptedBlobInfo, error)
  • func (s *Seal) Finalize(_ context.Context) error
  • func (s *Seal) Init(_ context.Context) error
  • func (s *Seal) KeyID() string
  • func (s *Seal) SealType() string
  • func (s *Seal) SetConfig(config map[string]string) (map[string]string, error)

Types

type Seal

type Seal struct {
	// contains filtered or unexported fields
}

Seal is a seal that leverages Vault's Transit secret engine

func NewSeal

func NewSeal(logger log.Logger) *Seal

NewSeal creates a new transit seal

func (*Seal) Decrypt

func (s *Seal) Decrypt(_ context.Context, in *physical.EncryptedBlobInfo) ([]byte, error)

Decrypt is used to decrypt the ciphertext

func (*Seal) Encrypt

func (s *Seal) Encrypt(_ context.Context, plaintext []byte) (*physical.EncryptedBlobInfo, error)

Encrypt is used to encrypt using Vaults Transit engine

func (*Seal) Finalize

func (s *Seal) Finalize(_ context.Context) error

Finalize is called during shutdown

func (*Seal) Init

func (s *Seal) Init(_ context.Context) error

Init is called during core.Initialize

func (*Seal) KeyID

func (s *Seal) KeyID() string

KeyID returns the last known key id.

func (*Seal) SealType

func (s *Seal) SealType() string

SealType returns the seal type for this particular seal implementation.

func (*Seal) SetConfig

func (s *Seal) SetConfig(config map[string]string) (map[string]string, error)

SetConfig processes the config info from the server config