2.5. 生成对称密钥

流程

1. 使用 顺序创建 并将其保存在 barbican 中，生成 256 位密钥。例如：

   $ openstack secret order create --name swift_key --algorithm aes --mode ctr --bit-length 256 --payload-content-type=application/octet-stream key
   +----------------+-----------------------------------------------------------------------------------+
   | Field          | Value                                                                             |
   +----------------+-----------------------------------------------------------------------------------+
   | Order href     | https://192.168.123.173:9311/v1/orders/043383fe-d504-42cf-a9b1-bc328d0b4832 |
   | Type           | Key                                                                               |
   | Container href | N/A                                                                               |
   | Secret href    | None                                                                              |
   | Created        | None                                                                              |
   | Status         | None                                                                              |
   | Error code     | None                                                                              |
   | Error message  | None                                                                              |
   +----------------+-----------------------------------------------------------------------------------+

   Copy to Clipboard Toggle word wrap

   您还可以使用 --mode 选项将生成的密钥配置为使用特定模式，如 ctr 或 cbc。如需更多信息，请参阅 NIST SP 800-38A。

2. 查看识别所生成密钥位置的顺序详情，如 Secret href 值所示：

   $ openstack secret order get https://192.168.123.173:9311/v1/orders/043383fe-d504-42cf-a9b1-bc328d0b4832
   +----------------+------------------------------------------------------------------------------------+
   | Field          | Value                                                                              |
   +----------------+------------------------------------------------------------------------------------+
   | Order href     | https://192.168.123.173:9311/v1/orders/043383fe-d504-42cf-a9b1-bc328d0b4832  |
   | Type           | Key                                                                                |
   | Container href | N/A                                                                                |
   | Secret href    | https://192.168.123.173:9311/v1/secrets/efcfec49-b9a3-4425-a9b6-5ba69cb18719 |
   | Created        | 2018-01-24T04:24:33+00:00                                                          |
   | Status         | ACTIVE                                                                             |
   | Error code     | None                                                                               |
   | Error message  | None                                                                               |
   +----------------+------------------------------------------------------------------------------------+

   Copy to Clipboard Toggle word wrap

3. 检索 secret 的详情：

   $ openstack secret get https://192.168.123.173:9311/v1/secrets/efcfec49-b9a3-4425-a9b6-5ba69cb18719
   +---------------+------------------------------------------------------------------------------------+
   | Field         | Value                                                                              |
   +---------------+------------------------------------------------------------------------------------+
   | Secret href   | https://192.168.123.173:9311/v1/secrets/efcfec49-b9a3-4425-a9b6-5ba69cb18719 |
   | Name          | swift_key                                                                     |
   | Created       | 2018-01-24T04:24:33+00:00                                                          |
   | Status        | ACTIVE                                                                             |
   | Content types | {u'default': u'application/octet-stream'}                                          |
   | Algorithm     | aes                                                                                |
   | Bit length    | 256                                                                                |
   | Secret type   | symmetric                                                                          |
   | Mode          | ctr                                                                                |
   | Expiration    | None                                                                               |
   +---------------+------------------------------------------------------------------------------------+

   Copy to Clipboard Toggle word wrap