mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
Ingo Franzki
4eab80ef44
Allow to generate a new AES key at the KMIP server, and retrieved it. Keys are always retrieved in wrapped format, wrapped by the public RSA wrapping key used by the KMIP plugin. The KMIP plugin can then unwrap the retrieved key with its secure private RSA key, and can then import the retrieved AES key into the zkey repository as secure key. That way, the retrieved AES key is never in clear, once it leaves the KMIP server. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>