[Pki-devel] [PATCH] 194 - Initial work for python client API

[Endi Sukma Dewata]

On 2/17/2014 11:36 AM, Ade Lee wrote:
>> 4. To be consistent the decode_from_json() can be called from_json(). Is
>> there any difference between this method and from_dict()?
>>
> Done.

For consistency should they all be called from_json()?

>> 16. From client application's perspective, it would be better if the
>> kraclient.generate_sym_key() can take a list of usages, instead of
>> requiring the client app to join the usages manually.
>
> Done

In key.py, the SymKeyGenerationRequest constructor takes a list of 
key_usages string to be concatenated later, but in the main program it's 
taking an already concatenated list of usages.

>> 17. Ideally the Key/KeyRequest-specific methods in KRAClient should be
>> moved into KeyClient/KeyRequestClient classes to avoid cluttering up the
>> KRAClient class. In the Java client library user-specific methods are
>> grouped into UserClient under KRAClient.

The KRAClient still has key-specific operations such as retrieve_key(), 
generate_sym_key(), etc. Should they be moved into KeyClient as well?

20. As mentioned on IRC, the drmtest setup requires manually importing 
the transport cert. Also the KRAClient constructor takes the transport 
cert nickname. Shouldn't the KRAClient get the transport cert directly 
from the server and import it to the client database?

21. Also already discussed on IRC, the NSSCryptoUtil contains hardcoded 
nonce_iv default value. It probably should be random.

22. The symmetric_unwrap() takes base-64-encoded data and nonce_iv 
parameters. I think usually the caller would have to provide undecoded data.

-- 
Endi S. Dewata