2.5. 生成对称密钥

流程

1. 使用 顺序 创建并存储在 barbican 中生成新的 256 位密钥。例如：

   $ openstack secret order create --name swift_key --algorithm aes --mode ctr --bit-length 256 --payload-content-type=application/octet-stream key
   +----------------+-----------------------------------------------------------------------------------+
   | Field          | Value                                                                             |
   +----------------+-----------------------------------------------------------------------------------+
   | Order href     | https://192.168.123.173:9311/v1/orders/043383fe-d504-42cf-a9b1-bc328d0b4832 |
   | Type           | Key                                                                               |
   | Container href | N/A                                                                               |
   | Secret href    | None                                                                              |
   | Created        | None                                                                              |
   | Status         | None                                                                              |
   | Error code     | None                                                                              |
   | Error message  | None                                                                              |
   +----------------+-----------------------------------------------------------------------------------+

   您还可以使用- mode 选项将 生成的密钥配置为使用特定模式，如 ctr 或 cbc。如需更多信息，请参阅 NIST SP 800-38A。

2. 查看识别生成的密钥位置的顺序详情，这里显示为 Secret href 值：

   $ openstack secret order get https://192.168.123.173:9311/v1/orders/043383fe-d504-42cf-a9b1-bc328d0b4832
   +----------------+------------------------------------------------------------------------------------+
   | Field          | Value                                                                              |
   +----------------+------------------------------------------------------------------------------------+
   | Order href     | https://192.168.123.173:9311/v1/orders/043383fe-d504-42cf-a9b1-bc328d0b4832  |
   | Type           | Key                                                                                |
   | Container href | N/A                                                                                |
   | Secret href    | https://192.168.123.173:9311/v1/secrets/efcfec49-b9a3-4425-a9b6-5ba69cb18719 |
   | Created        | 2018-01-24T04:24:33+00:00                                                          |
   | Status         | ACTIVE                                                                             |
   | Error code     | None                                                                               |
   | Error message  | None                                                                               |
   +----------------+------------------------------------------------------------------------------------+

3. 检索 secret 的详细信息：

   $ openstack secret get https://192.168.123.173:9311/v1/secrets/efcfec49-b9a3-4425-a9b6-5ba69cb18719
   +---------------+------------------------------------------------------------------------------------+
   | Field         | Value                                                                              |
   +---------------+------------------------------------------------------------------------------------+
   | Secret href   | https://192.168.123.173:9311/v1/secrets/efcfec49-b9a3-4425-a9b6-5ba69cb18719 |
   | Name          | swift_key                                                                     |
   | Created       | 2018-01-24T04:24:33+00:00                                                          |
   | Status        | ACTIVE                                                                             |
   | Content types | {u'default': u'application/octet-stream'}                                          |
   | Algorithm     | aes                                                                                |
   | Bit length    | 256                                                                                |
   | Secret type   | symmetric                                                                          |
   | Mode          | ctr                                                                                |
   | Expiration    | None                                                                               |
   +---------------+------------------------------------------------------------------------------------+