Lowkey Vault - Example .Net

This is an example for Lowkey Vault. It demonstrates a basic scenario where a key is used for encrypt/decrypt operations and database connection specific credentials as well as getting a PKCS12 store with a certificate and matching private key inside.

Points of interest

Note: In order to better understand what is needed in general to make similar examples work, please find a generic overview here.

.NET Framework

• Key "repository"
• Secret "repository"
• Certificate "repository"
• Empty credentials for connecting to Lowkey Vault
• Tests

.NET Core

• Key "repository"
• Secret "repository"
• Certificate "repository"
• Empty credentials for connecting to Lowkey Vault (Not needed when using Assumed Identity container)
• Docker Compose to allow easy testing locally
• Tests
  • Tests using the empty credentials
  • Tests using the DefaultAzureCredential (Skipped on Windows, uses Assumed Identity container)

Usage

1. Start Lowkey Vault by following the steps here.
   1. Make sure it is accessible on https://localhost:8443
   2. If you want to use DefaultAzureCredential
      1. start Assumed Identity
      2. in the Managed Identity tests, make sure to:
         1. Set IDENTITY_ENDPOINT environment variable to point to the /metadata/identity/oauth2/token path of Assumed Identity e.g., http://localhost:8080/metadata/identity/oauth2/token
         2. Set IDENTITY_HEADER environment variable to anything (just needs to exist) e.g., header
2. Run the tests

Note

I am not a professional .Net developer. Please do not judge me by the code quality. I am open to any suggestions and improvements.