Browse Source

Add missing unit test for p11_crypto_plugin_always_set_cka_sensitive

This change is a follow-up of the previous commit[1] and add a unit
test case to validate the new parameter and a release note explaining
the change.

[1] 27b1cc2735

Change-Id: Ie7099bdf32a12fa85109279b576ff5ab126b59e0
changes/33/782533/2
Takashi Kajinami 1 year ago
parent
commit
f0304ab2a9
  1. 5
      releasenotes/notes/p11_crypto_plugin_always_set_cka_sensitive-1c9a9b9726c3cf93.yaml
  2. 3
      spec/classes/barbican_plugins_p11_crypto_spec.rb

5
releasenotes/notes/p11_crypto_plugin_always_set_cka_sensitive-1c9a9b9726c3cf93.yaml

@ -0,0 +1,5 @@
---
features:
- |
Support for the ``[p11_crypto_plugin] always_set_cka_sensitive`` parameter
has been added.

3
spec/classes/barbican_plugins_p11_crypto_spec.rb

@ -39,6 +39,7 @@ describe 'barbican::plugins::p11_crypto' do
:p11_crypto_plugin_hmac_keygen_mechanism => 'CKM_AES_KEY_GEN',
:p11_crypto_plugin_aes_gcm_generate_iv => false,
:p11_crypto_plugin_os_locking_ok => false,
:p11_crypto_plugin_always_set_cka_sensitive => true,
:global_default => true,
}
end
@ -70,6 +71,8 @@ describe 'barbican::plugins::p11_crypto' do
.with_value(params[:p11_crypto_plugin_hmac_keygen_mechanism])
is_expected.to contain_barbican_config('p11_crypto_plugin/aes_gcm_generate_iv') \
.with_value(params[:p11_crypto_plugin_aes_gcm_generate_iv])
is_expected.to contain_barbican_config('p11_crypto_plugin/always_set_cka_sensitive') \
.with_value(params[:p11_crypto_plugin_always_set_cka_sensitive])
is_expected.to contain_barbican_config('p11_crypto_plugin/os_locking_ok') \
.with_value(params[:p11_crypto_plugin_os_locking_ok])
is_expected.to contain_barbican_config(

Loading…
Cancel
Save