Lowkey Vault - Example .Net

This is an example for Lowkey Vault. It demonstrates a basic scenario where a key is used for encrypt/decrypt operations and database connection specific credentials as well as getting a PKCS12 store with a certificate and matching private key inside.

Points of interest

Note

In order to better understand what is needed in general to make similar examples work, please find a generic overview here.

.NET Framework

• Key "repository"
• Secret "repository"
• Certificate "repository"
• Empty credentials for connecting to Lowkey Vault
• Tests

.NET Core

• Key "repository"
• Secret "repository"
• Certificate "repository"
• Empty credentials for connecting to Lowkey Vault (Not needed when using Assumed Identity container)
• Docker Compose to allow easy testing locally
• Tests
  • Tests using the empty credentials
  • Tests using the DefaultAzureCredential

Usage

1. Start Lowkey Vault by following the steps here.
   1. Make sure it is accessible on https://localhost:8443
   2. If you want to use DefaultAzureCredential
      1. start Assumed Identity
      2. in the Managed Identity tests, make sure to:
         1. Set IDENTITY_ENDPOINT environment variable to point to the /metadata/identity/oauth2/token path of Assumed Identity e.g., http://localhost:8080/metadata/identity/oauth2/token
         2. Set IDENTITY_HEADER environment variable to anything (just needs to exist) e.g., header
2. Run the tests

Tip

Since v2.4.2, Lowkey Vault is providing the same token endpoint on the 8080 port by default. Therefore, you don't need to start another container.