SecureBlackbox 2020 macOS Edition

Questions / Feedback?

KMIPClient Module

Properties   Methods   Events   Configuration Settings   Errors  

The KMIPClient component provides client-side functionality for KMIP.

Syntax

nsoftware.SecureBlackbox.Kmipclient

Remarks

The Key Management Interoperability Protocol (KMIP) is an OASIS standard for communication between different key management servers and clients.

Property List


The following is the full list of the properties of the module with short descriptions. Click on the links for further details.

DataFileA path to the file containing the unsigned data.
EncoderTypeSpecifies the KMIP encoder type.
ExternalCryptoProvides access to external signing and DC parameters.
HostSpecifies the host name of the KMIP server.
InputFilePath to the file containing data to be signed, verified, encrypted or decrypted.
ObjectsA list of objects returned by GetList .
OutputFileSpecifies the file where the signed, encrypted, or decrypted data should be saved.
PasswordSpecifies a password to authenticate to the KMIP server.
PinnedCertThe certificate to perform operations on.
PinnedCertRequestThe certificate request to perform operations on.
PortSpecifies the port on the KMIP server to connect to.
ProxyThe proxy server settings.
SignatureValidationResultThe signature validation result.
SocketSettingsManages network connection settings.
TLSClientChainThe TLS client certificate chain.
TLSServerChainThe TLS server's certificate chain.
TLSSettingsManages TLS layer settings.
UsernameThe username to authenticate to the KMIP server.

Method List


The following is the full list of the methods of the module with short descriptions. Click on the links for further details.

AddCertificateImports a certificate to the KMIP server.
AddKeyImports a key to the KMIP server.
AddPinnedImports a certificate to the KMIP server.
ConfigSets or retrieves a configuration setting.
DecryptDecrypts the provided data using a key stored on the KMIP server.
EncryptEncrypts the provided data using a key stored on the KMIP server.
GenerateCertGenerates a new certificate on the KMIP server.
GenerateCertFromPinnedGenerates a new certificate on the KMIP server from the pinned certificate.
GenerateCertFromRequestGenerates a new certificate on the KMIP server from the certificate request.
GenerateKeyGenerates a symmetric key or an asymmetric key pair on the KMIP server.
GetListRetrieves the list of objects of a given type.
RemoveRemoves the specified object from the server.
SignSigns the data using a key on the KMIP server.
VerifyVerifies digitally signed data.

Event List


The following is the full list of the events fired by the module with short descriptions. Click on the links for further details.

ErrorProvides information about errors during KMIP operations.
ExternalSignHandles remote or external signing initiated by the SignExternal method or other source.
NotificationThis event notifies the application about an underlying control flow event.
TLSCertValidateThis event is fired upon receipt of the TLS server's certificate, allowing the user to control its acceptance.

Configuration Settings


The following is a list of configuration settings for the module with short descriptions. Click on the links for further details.

BlockCipherModeBlock cipher mode to use for encrypting or decrypting.
BlockSizeBlock size of data for encrypting, decrypting or signing.
CurveName of the curve of the newly added elliptic cryptography (EC) key.
HashAlgorithmHash algorithm to use for signing or verifying.
IVCounterNonceInitialization vector, counter or nonce for encrypting or decrypting.
MajorProtocolVersionMajor protocol version of the KMIP server.
MaximumItemsThe maximum number of items to be returned on getting the object list.
MinorProtocolVersionMinor protocol version of the KMIP server.
OffsetItemsThe number of items to skip on getting the object list.
PaddingMethodPadding method to use for encrypting or decrypting.
RandomIVWhether to generate the initialization vector automatically.
TagLengthTag length to use for encrypting or decrypting.
TempPathPath for storing temporary files.
CheckKeyIntegrityBeforeUseEnables or disable private key integrity check before use.
CookieCachingSpecifies whether a cookie cache should be used for HTTP(S) transports.
CookiesGets or sets local cookies for the component (supported for HTTPClient, RESTClient and SOAPClient only).
DefDeriveKeyIterationsSpecifies the default key derivation algorithm iteration count.
EnableClientSideSSLFFDHEEnables or disables finite field DHE key exchange support in TLS clients.
GlobalCookiesGets or sets global cookies for all the HTTP transports.
HttpUserAgentSpecifies the user agent name to be used by all HTTP clients.
LogDestinationSpecifies the debug log destination.
LogDetailsSpecifies the debug log details to dump.
LogFileSpecifies the debug log filename.
LogFiltersSpecifies the debug log filters.
LogFlushModeSpecifies the log flush mode.
LogLevelSpecifies the debug log level.
LogMaxEventCountSpecifies the maximum number of events to cache before further action is taken.
LogRotationModeSpecifies the log rotation mode.
MaxASN1BufferLengthSpecifies the maximal allowed length for ASN.1 primitive tag data.
MaxASN1TreeDepthSpecifies the maximal depth for processed ASN.1 trees.
OCSPHashAlgorithmSpecifies the hash algorithm to be used to identify certificates in OCSP requests.
UseOwnDNSResolverSpecifies whether the client components should use own DNS resolver.
UseSharedSystemStoragesSpecifies whether the validation engine should use a global per-process copy of the system certificate stores.
UseSystemOAEPAndPSSEnforces or disables the use of system-driven RSA OAEP and PSS computations.
UseSystemRandomEnables or disables the use of the OS PRNG.

Copyright (c) 2022 /n software inc. - All rights reserved.
SecureBlackbox 2020 macOS Edition - Version 20.0 [Build 8166]