Skip to content

Conversation

blink1073
Copy link
Member

No description provided.

@blink1073 blink1073 requested a review from ShaneHarvey August 10, 2022 20:11
Copy link
Member

@ShaneHarvey ShaneHarvey left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One last issue:

[2022/08/10 22:47:12.652] ERROR: test_rewrap (test.test_encryption.TestRewrapWithSeparateClientEncryption) (src_provider='local', dst_provider='local') [2022/08/10 22:47:12.653] ---------------------------------------------------------------------- [2022/08/10 22:47:12.653] Traceback (most recent call last): [2022/08/10 22:47:12.653] File "/data/mci/1f2979f82d22e06506f6cff1d940194e/src/test/test_encryption.py", line 2230, in test_rewrap [2022/08/10 22:47:12.653] self.run_test(src_provider, dst_provider) [2022/08/10 22:47:12.653] File "/data/mci/1f2979f82d22e06506f6cff1d940194e/src/test/test_encryption.py", line 2247, in run_test [2022/08/10 22:47:12.653] master_key=self.MASTER_KEYS[src_provider], kms_provider=src_provider [2022/08/10 22:47:12.653] KeyError: 'local' 
@blink1073
Copy link
Member Author

One last issue:

Fixed

for src_provider in self.MASTER_KEYS:
for dst_provider in self.MASTER_KEYS:
with self.subTest(src_provider=src_provider, dst_provider=dst_provider):
self.run_test(src_provider, dst_provider)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The test says we still need to test the "local" provider:

For "local", do not set a masterKey document.

I think that means we need to add

... "kmip": {}, "local": None, } 
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

They used local: {} in the C driver, I'll go with that.

@blink1073 blink1073 requested a review from ShaneHarvey August 11, 2022 20:00
"local": {},
}

KMS_TLS_OPTS = {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think the tlsCAFile is only valid/needed for kmip. Can we use the existing KMS_TLS_OPTS global instead of adding a new self.KMS_TLS_OPTS?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done

@blink1073 blink1073 requested a review from ShaneHarvey August 12, 2022 15:34
@blink1073 blink1073 merged commit c0dadcb into mongodb:master Aug 12, 2022
@blink1073 blink1073 deleted the PYTHON-3385 branch August 12, 2022 18:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants