overtrue 3d533dd1be
test(kms): cover Transit decrypt of pre-rotation data keys offline ...
Vault owns the transit crypto, so the offline responder cannot prove the
round trip - that stays in the #[ignore] live test. What it can pin is the
client-side wiring: after a rotation records the version bump, decrypting
a data key generated before it must forward the historical vault:v1:
ciphertext to Vault byte for byte and return the material Vault hands
back.
2026-08-02 03:09:01 +08:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-08-01 05:25:18 +00:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-08-01 12:36:14 +00:00
2026-08-01 17:31:50 +00:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-08-01 08:49:48 +00:00
2026-07-31 05:42:19 +00:00
2026-08-01 15:07:17 +00:00
2026-07-31 05:42:19 +00:00
2026-08-02 03:09:01 +08:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-08-01 19:14:31 +08:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-08-01 17:31:50 +00:00
2026-08-01 15:57:26 +00:00
2026-07-31 05:42:19 +00:00
2026-08-01 05:41:02 +00:00
2026-08-01 17:31:50 +00:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-08-01 14:49:16 +00:00
2026-08-01 17:08:31 +00:00
2026-08-01 11:20:33 +00:00
2026-08-01 03:47:42 +00:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-08-01 03:25:13 +00:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-07-31 05:42:19 +00:00
2026-07-02 23:30:13 +08:00
overtrue
3d533dd1be