[CXX-2410] Support KMIP provider Created: 01/Nov/21  Updated: 28/Oct/23  Resolved: 07/Sep/22

Status: Closed
Project: C++ Driver
Component/s: None
Affects Version/s: None
Fix Version/s: 3.7.0

Type: Improvement Priority: Unknown
Reporter: Kevin Albertson Assignee: Ezra Chung
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Cloners
clones CDRIVER-4206 Support KMIP provider Closed
Duplicate
is duplicated by CXX-2321 CSFLE 1.0 KMIP Support Closed
Issue split
split from DRIVERS-1353 CSFLE 1.0 KMIP Support Closed
Related
related to CXX-2487 Add CSFLE spec test for auto encrypti... Closed
related to CXX-2155 Sharing a MongoClient for metadata lo... Closed
Quarter: FY23Q3

 Description   

Scope

  • Add "kmip" to the kmsProviders map.
  • Add TLS options for the "kmip" provider.
  • Add "kmip" to the DataKeyOpts.masterKey document.
  • Add a new CSFLE specification test kmipKMS.json
  • Update the CSFLE prose tests Corpus Test, Custom Endpoint Test, Data key and double encryption.


 Comments   
Comment by Githook User [ 07/Sep/22 ]

Author:

{'name': 'Ezra Chung', 'email': '88335979+eramongodb@users.noreply.github.com', 'username': 'eramongodb'}

Message: CXX-2410 Add support for KMIP KMS provider (#894)

  • Add support for setting TLS options for client encryption
  • Add support for setting TLS options for auto encryption
  • Make mongocxx::client_encryption moveable
  • Add KMIP provider and TLS options to basic CSE test helpers
  • Add test case sections to Prose Test 7 - Custom Endpoint Test
  • Update Prose Test 2 - Data Key and Double Encryption with KMIP
  • Update Prose Test 6 - Corpus Test with KMIP
  • Update Prose Test 7 - Custom Endpoint Test with KMIP
  • Add CSE Prose Test 11 - KMS TLS Options Tests
  • Add CAFile and tlsCertificateKeyFile env vars to Evergreen
  • Update client_encryption::create_data_key docs to include supported KMS providers
  • Update options::data_key docs to include KMIP
  • Add new MONGOCXX_TEST_* env vars to should_run_client_side_encryption_test
  • Add KMIP support for legacy runner in autoEncryptionOpts
  • Sync legacy CSE spec tests with 61b81891
  • CXX-2155 Sync legacy CSE spec tests with 947be4cf
  • CXX-2410 Sync legacy CSE spec tests with 5964c134
  • CXX-2488 Sync legacy CSE spec tests with 6a7158d5
  • CXX-2487 Sync legacy CSE spec tests with 02b4275d
  • Divide CSE legacy test runner into sections by file and test description
Generated at Wed Feb 07 22:05:50 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.