Skip to content

fix(kmip): close conformance gaps and guard the #1312/#1313 class - #1317

Open
Manuthor wants to merge 9 commits into
developfrom
fix/kmip-conformance-gaps
Open

Manuthor wants to merge 9 commits into
developfrom
fix/kmip-conformance-gaps

Conversation

@Manuthor

Copy link
Copy Markdown
Contributor

Spec tag names on the binary wire, KMIP 1.x reasons, precise result reasons, message semantics (Stop, critical extensions, Ephemeral, ID Placeholder, Max Response Size), Locate/Query fixes, grant-aware HSM Locate paging, bounded socket memory. Companion test_data PR linked in its body. Scope exception: production edits under crate/clients are not included.

@Manuthor
Manuthor deployed to xks-remote-approval October 19, 2026 17:50 — with GitHub Actions Active
@Manuthor
Manuthor deployed to xks-remote-approval October 19, 2026 18:20 — with GitHub Actions Active
@Manuthor
Manuthor deployed to xks-remote-approval October 19, 2026 19:11 — with GitHub Actions Active
@Manuthor
Manuthor deployed to xks-remote-approval October 19, 2026 19:54 — with GitHub Actions Active
@Manuthor
Manuthor deployed to xks-remote-approval October 19, 2026 23:14 — with GitHub Actions Active
@Manuthor
Manuthor deployed to xks-remote-approval October 20, 2026 02:11 — with GitHub Actions Active
@Manuthor
Manuthor deployed to xks-remote-approval October 20, 2026 02:12 — with GitHub Actions Active
@Manuthor
Manuthor deployed to xks-remote-approval October 20, 2026 03:16 — with GitHub Actions Active
@Manuthor
Manuthor deployed to xks-remote-approval October 20, 2026 04:22 — with GitHub Actions Active
@Manuthor
Manuthor deployed to xks-remote-approval October 20, 2026 05:24 — with GitHub Actions Active
@Manuthor
Manuthor deployed to xks-remote-approval October 22, 2026 15:02 — with GitHub Actions Active
@Manuthor
Manuthor deployed to xks-remote-approval October 22, 2026 15:31 — with GitHub Actions Active
@Manuthor
Manuthor deployed to xks-remote-approval October 22, 2026 15:34 — with GitHub Actions Active
@Manuthor
Manuthor deployed to xks-remote-approval October 22, 2026 16:06 — with GitHub Actions Active
@Manuthor
Manuthor force-pushed the fix/kmip-result-reasons-batch-items-1312-1313-develop branch 2 times, most recently from 65c68b5 to 13b9e49 Compare October 22, 2026 19:04
@Manuthor
Manuthor force-pushed the fix/kmip-conformance-gaps branch from 7d0fb41 to 4e2064c Compare October 23, 2026 05:38
@Manuthor
Manuthor had a problem deploying to xks-remote-approval October 23, 2026 05:38 — with GitHub Actions Failure
@Manuthor
Manuthor deployed to xks-remote-approval October 23, 2026 07:48 — with GitHub Actions Active
@Manuthor
Manuthor deployed to xks-remote-approval October 23, 2026 09:11 — with GitHub Actions Active
@Manuthor
Manuthor deployed to xks-remote-approval October 23, 2026 10:23 — with GitHub Actions Active
@Manuthor
Manuthor deployed to xks-remote-approval October 23, 2026 11:25 — with GitHub Actions Active
@Manuthor
Manuthor force-pushed the fix/kmip-conformance-gaps branch 2 times, most recently from cdf49ca to 2c13a32 Compare October 24, 2026 13:05
@Manuthor
Manuthor changed the base branch from fix/kmip-result-reasons-batch-items-1312-1313-develop to develop October 24, 2026 13:05
@Manuthor
Manuthor deployed to xks-remote-approval October 25, 2026 11:03 — with GitHub Actions Active
@Manuthor
Manuthor had a problem deploying to xks-remote-approval October 25, 2026 14:09 — with GitHub Actions Failure
@Manuthor
Manuthor deployed to xks-remote-approval October 25, 2026 17:26 — with GitHub Actions Active
Operators keep lifecycle and attribute operations when a Crypto Officer is configured; Maximum Response Size applies to Query only; MAC does not enforce the usage mask; Revoke of a Deactivated/Destroyed object is a no-op again; Locate offsets are not capped; JSON certificate attribute names, text Validity Time, empty Query, Extractable updates and RSA wrapping format are restored; client-supplied IVs ignore IV Length.
…roy tolerates Pre-Active objects

ckms certificates validate prints the validity indicator then fails unless it is Valid, as when the server rejected an invalid chain. C_DestroyObject no longer fails when the Revoke step is refused for a Pre-Active object.
…data

Pins test_data to the vectors that expect idempotent Revoke and drop the removed Operator, Extractable-latch and Locate-offset cases (vector README regenerated).
Stale changelog, docs and SECURITY.md claims removed; validate CLI test reaches the server and checks the error; Pre-Active Revoke regression test; redundant IV length check removed.
@Manuthor
Manuthor force-pushed the fix/kmip-conformance-gaps branch from 8d2e6c6 to 592a6ce Compare October 25, 2026 20:18
@Manuthor
Manuthor had a problem deploying to xks-remote-approval October 25, 2026 20:19 — with GitHub Actions Failure
@Manuthor
Manuthor deployed to xks-remote-approval October 25, 2026 20:32 — with GitHub Actions Active
@Manuthor
Manuthor deployed to xks-remote-approval October 26, 2026 07:27 — with GitHub Actions Active

This branch was successfully deployed

1 active deployment
xks-remote-approval — c56de6dc Deployed Oct 26, 2026 by Manuthor via main / test / AWS XKS — remote server #9398
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant