zkey: Update properties in the KMS for change and rename commands

When key properties are changed with the 'change' command, also update
the key properties in the KMS, if the key is bound to a KMS. Do not
allow to change the associated APQNs for KMS bound keys. KMS bound keys
inherit the APQNs from the KMS plugin.

When a key is renamed in the repository, also update the key name
property in the KMS if the key is KMS bound.

Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
This commit is contained in:
Ingo Franzki
2020-06-15 15:11:04 +02:00
committed by Jan Höppner
parent a2f14fcfd7
commit 1d7bb283fd
5 changed files with 208 additions and 9 deletions
+2
View File
@@ -1189,6 +1189,7 @@ static struct zkey_command zkey_commands[] = {
"the repository",
.has_options = 1,
.need_keystore = 1,
.use_kms_plugin = 1,
},
{
.command = COMMAND_RENAME,
@@ -1198,6 +1199,7 @@ static struct zkey_command zkey_commands[] = {
.long_desc = "Rename a secure AES key in the repository",
.has_options = 1,
.need_keystore = 1,
.use_kms_plugin = 1,
},
{
.command = COMMAND_COPY,