libmongocrypt-helper 1.7.0.0.1001 → 1.7.4.0.1000

data/ext/libmongocrypt/libmongocrypt/test/data/keys/12345678123498761234123456789012-local-document.json

@@ -0,0 +1,30 @@
+{
+    "_id": {
+        "$binary": {
+            "base64": "EjRWeBI0mHYSNBI0VniQEg==",
+            "subType": "04"
+        }
+    },
+    "keyMaterial": {
+        "$binary": {
+            "base64": "1ZbBTB1i/z4LcmBKi9+nnWqkVB4Wl6P4G7/TFQvXATRF2fX0lhBLIM6rT1U547FX2YgMtaP7sid+jpd4Vhz5kS+UlgtmCFfjeO4qOnJ78KEXRzeIebzKWKQz1pMhYZ3OURDL4wCtNqt3tbSr11kfTADmCMuzgp8U8P8T21RWWBU0f2XDcxiIShYncOS3poKu7GJaPCTav4r3h5h2xRklDA==",
+            "subType": "00"
+        }
+    },
+    "creationDate": {
+        "$date": {
+            "$numberLong": "1648914851981"
+        }
+    },
+    "updateDate": {
+        "$date": {
+            "$numberLong": "1648914851981"
+        }
+    },
+    "status": {
+        "$numberInt": "0"
+    },
+    "masterKey": {
+        "provider": "local"
+    }
+}

data/ext/libmongocrypt/libmongocrypt/test/data/keys/12345678123498761234123456789013-aws-decrypt-reply.txt

@@ -0,0 +1,11 @@
+HTTP/1.1 200 OK
+x-amzn-RequestId: 61524068-10fc-458d-8c85-aa23fd58ff56
+Cache-Control: no-cache, no-store, must-revalidate, private
+Expires: 0
+Pragma: no-cache
+Date: Fri, 29 Apr 2022 13:21:22 GMT
+Content-Type: application/x-amz-json-1.1
+Content-Length: 294
+Connection: close
+
+{"EncryptionAlgorithm":"SYMMETRIC_DEFAULT","KeyId":"arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0","KeyOrigin":"AWS_KMS","Plaintext":"H2XDIj1WU829c8Eaj4VYeq/L1b5+TDCNNXsvAbvPdqmAKTDl8jOSO7w/Xr0L4duYB/BKqHDIlgkhgN2LBYFrj3Vo/3YqGk79NbvAKCY5TrMPNs2ODGRq4vQ99CDlChnr"}

data/ext/libmongocrypt/libmongocrypt/test/data/keys/12345678123498761234123456789013-aws-document.json

@@ -0,0 +1,32 @@
+{
+    "_id": {
+        "$binary": {
+            "base64": "EjRWeBI0mHYSNBI0VniQEw==",
+            "subType": "04"
+        }
+    },
+    "keyMaterial": {
+        "$binary": {
+            "base64": "AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gG7JTEihw4JH7KZ7aFD677EAAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDANc1smIZE/xHp5+kwIBEIB78OFCdWkE1363uAER/mTCM6ccm0UZbjHXJfLCIvy52tiYLkUsykDXCcFoLaZ4LgK/6bm9816iEthHMKHMdHrn7kVEk+2H0A9TWzW6d5lvN3IT4qNKNy5dzH1ayufINYt/FnH+316Z/HQxvlG4Uf+ajPM21G5/PIUUe0hZ",
+            "subType": "00"
+        }
+    },
+    "creationDate": {
+        "$date": {
+            "$numberLong": "1651238481951"
+        }
+    },
+    "updateDate": {
+        "$date": {
+            "$numberLong": "1651238481951"
+        }
+    },
+    "status": {
+        "$numberInt": "0"
+    },
+    "masterKey": {
+        "provider": "aws",
+        "region": "us-east-1",
+        "key": "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0"
+    }
+}

data/ext/libmongocrypt/libmongocrypt/test/data/keys/12345678123498761234123456789013-key-material.txt

@@ -0,0 +1 @@
+1f65c3223d5653cdbd73c11a8f85587aafcbd5be7e4c308d357b2f01bbcf76a9802930e5f233923bbc3f5ebd0be1db9807f04aa870c896092180dd8b05816b8f7568ff762a1a4efd35bbc02826394eb30f36cd8e0c646ae2f43df420e50a19eb

data/ext/libmongocrypt/libmongocrypt/test/data/keys/12345678123498761234123456789013-local-document.json

@@ -0,0 +1,30 @@
+{
+    "_id": {
+        "$binary": {
+            "base64": "EjRWeBI0mHYSNBI0VniQEw==",
+            "subType": "04"
+        }
+    },
+    "keyMaterial": {
+        "$binary": {
+            "base64": "YQXu48YyDbXvVQ1OhPsodQQNA1gLVWZSV0udYVmCTpVrgyAZePHQmsWWnQzNZj+ZsTxRm02soje/FJCqWGLeth3gKdvIsRg15CDEUOqLdDEpHl46hadosXyJIfo0umZ/LVTkvxRhmDCDxAkd0+Dg4/vWSiG0FgNzGrlvOUsTLGbqWtNMuOdZ8pKAdnFRrqce5cwBGQmd2VVBA2OQ0/IMxQ==",
+            "subType": "00"
+        }
+    },
+    "creationDate": {
+        "$date": {
+            "$numberLong": "1650631142512"
+        }
+    },
+    "updateDate": {
+        "$date": {
+            "$numberLong": "1650631142512"
+        }
+    },
+    "status": {
+        "$numberInt": "0"
+    },
+    "masterKey": {
+        "provider": "local"
+    }
+}

data/ext/libmongocrypt/libmongocrypt/test/data/keys/12345678123498761234123456789014-key-material.txt

@@ -0,0 +1 @@
+1f65c3223d5653cdbd73c11a8f85587aafcbd5be7e4c308d357b2f01bbcf76a9802930e5f233923bbc3f5ebd0be1db9807f04aa870c896092180dd8b05816b8f7568ff762a1a4efd35bbc02826394eb30f36cd8e0c646ae2f43df420e50a19eb

data/ext/libmongocrypt/libmongocrypt/test/data/keys/12345678123498761234123456789014-local-document.json

@@ -0,0 +1,30 @@
+{
+    "_id": {
+        "$binary": {
+            "base64": "EjRWeBI0mHYSNBI0VniQFA==",
+            "subType": "04"
+        }
+    },
+    "keyMaterial": {
+        "$binary": {
+            "base64": "huOrOjM8DWLRP43+oeYYFePEbHVYFgLSBAI6OPTDxW9AhegvodHyTLW9GD3QjhF0QnKqRiCEsBSbVEuGHxGD3Mf946/JYl9Ky8OsMzGeIoKXoxZsdztUDoW7TSWM4joPeVM+0GpmkEWgIPwWX9V9lnRv60CL+USOdOoK3FCOH+8u5NdjtdeDTAUFtbasZRW+r/5P/4LvnGuIfN/CIv7Ovg==",
+            "subType": "00"
+        }
+    },
+    "creationDate": {
+        "$date": {
+            "$numberLong": "1650631261637"
+        }
+    },
+    "updateDate": {
+        "$date": {
+            "$numberLong": "1650631261637"
+        }
+    },
+    "status": {
+        "$numberInt": "0"
+    },
+    "masterKey": {
+        "provider": "local"
+    }
+}

data/ext/libmongocrypt/libmongocrypt/test/data/keys/ABCDEFAB123498761234123456789012-aws-decrypt-reply.txt

@@ -0,0 +1,11 @@
+HTTP/1.1 200 OK
+x-amzn-RequestId: adcfdbde-7213-4fcf-a312-370e1d0ccaf0
+Cache-Control: no-cache, no-store, must-revalidate, private
+Expires: 0
+Pragma: no-cache
+Date: Sat, 02 Apr 2022 16:00:00 GMT
+Content-Type: application/x-amz-json-1.1
+Content-Length: 272
+Connection: close
+
+{"EncryptionAlgorithm":"SYMMETRIC_DEFAULT","KeyId":"arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0","Plaintext":"p928TIvgDVH2jZ2OSF81HI7cjSIGsk2ODhgW0AX75SDkiRJQR9ZHsNhoS/vb8JwwQIXtCGq6bCsrFnfMyRztiEenM79eVoLISz7nlp5KX+Dgwh5ePuGQWVpV+DFH2N4q"}

data/ext/libmongocrypt/libmongocrypt/test/data/keys/ABCDEFAB123498761234123456789012-aws-document.json

@@ -0,0 +1,32 @@
+{
+    "_id": {
+        "$binary": {
+            "base64": "q83vqxI0mHYSNBI0VniQEg==",
+            "subType": "04"
+        }
+    },
+    "keyMaterial": {
+        "$binary": {
+            "base64": "AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gECARBA9u8bNDBpw/x3UP0GAAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDGo4wmA5gMfyL7UCoQIBEIB7k7qshUFeiG8B1dlxR0zjcbM8z7tKHlC+mH6IJ9tdSncldQ1Mb+Ur28J2OF9IVxA5poU/HV+JbI0unldTWJ57k70wu11k5v7PU0gikw0OCQiBdfwaoC9MvvpJ6r4t+15Rf0G35jSk7ZCPZa8dwYuzEoAoKJhxNuUjDhVY",
+            "subType": "00"
+        }
+    },
+    "creationDate": {
+        "$date": {
+            "$numberLong": "1648915200516"
+        }
+    },
+    "updateDate": {
+        "$date": {
+            "$numberLong": "1648915200516"
+        }
+    },
+    "status": {
+        "$numberInt": "0"
+    },
+    "masterKey": {
+        "provider": "aws",
+        "region": "us-east-1",
+        "key": "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0"
+    }
+}

data/ext/libmongocrypt/libmongocrypt/test/data/keys/ABCDEFAB123498761234123456789012-key-material.txt

@@ -0,0 +1 @@
+a7ddbc4c8be00d51f68d9d8e485f351c8edc8d2206b24d8e0e1816d005fbe520e489125047d647b0d8684bfbdbf09c304085ed086aba6c2b2b1677ccc91ced8847a733bf5e5682c84b3ee7969e4a5fe0e0c21e5e3ee190595a55f83147d8de2a

data/ext/libmongocrypt/libmongocrypt/test/data/keys/ABCDEFAB123498761234123456789012-local-document.json

@@ -0,0 +1,30 @@
+{
+    "_id": {
+        "$binary": {
+            "base64": "q83vqxI0mHYSNBI0VniQEg==",
+            "subType": "04"
+        }
+    },
+    "keyMaterial": {
+        "$binary": {
+            "base64": "27OBvUqHAuYFy60nwCdvq2xmZ4kFzVySphXzBGq+HEot13comCoydEfnltBzLTuXLbV9cnREFJIO5f0jMqrlkxIuvAV8yO84p5VJTEa8j/xSNe7iA594rx7UeKT0fOt4VqM47fht8h+8PZYc5JVezvEMvwk115IBCwENxDjLtT0g+y8Hf+aTUEGtxrYToH8zf1/Y7S16mHiIc4jK3/vxHw==",
+            "subType": "00"
+        }
+    },
+    "creationDate": {
+        "$date": {
+            "$numberLong": "1648915408923"
+        }
+    },
+    "updateDate": {
+        "$date": {
+            "$numberLong": "1648915408923"
+        }
+    },
+    "status": {
+        "$numberInt": "0"
+    },
+    "masterKey": {
+        "provider": "local"
+    }
+}

data/ext/libmongocrypt/libmongocrypt/test/data/keys/README.md

@@ -0,0 +1,21 @@
+This directory contains Data Encryption Key (DEKs) encrypted by various Key Encryption Keys (KEKs) for testing.
+
+Files are named as follows:
+
+- `<UUID>-key-material.txt` is the decrypted key material.
+- `<UUID>-local-document.json` is a key document with "_id" of <UUID> encrypted with a local KEK.
+- `<UUID>-aws-document.json` is a key document with "_id" of <UUID> encrypted with an AWS KEK.
+- `<UUID>-aws-decrypt-reply.txt` is an HTTP reply from AWS KMS decrypting the DEK.
+
+The key material of the local KEK 96 bytes of 0.
+
+The `csfle` CLI tool was used to generate output for these files. Here is an example command used for creating a "-aws-document.json" file:
+
+```bash
+./cmake-build/csfle create_datakey \
+        --kms_providers_file ~/.csfle/kms_providers.json \
+        --kms_provider aws \
+        --aws_kek_region us-east-1 \
+        --aws_kek_key 'arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0' \
+        --key_material "p928TIvgDVH2jZ2OSF81HI7cjSIGsk2ODhgW0AX75SDkiRJQR9ZHsNhoS/vb8JwwQIXtCGq6bCsrFnfMyRztiEenM79eVoLISz7nlp5KX+Dgwh5ePuGQWVpV+DFH2N4q"
+```

data/ext/libmongocrypt/libmongocrypt/test/data/kms-encrypt-reply.txt

@@ -0,0 +1,7 @@
+HTTP/1.1 200 OK
+x-amzn-RequestId: deeb35e5-4ecb-4bf1-9af5-84a54ff0af0e
+Content-Type: application/x-amz-json-1.1
+Content-Length: 446
+Connection: close
+
+{"KeyId": "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0", "CiphertextBlob": "AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gHCPOT4UQIpMTvAVABLqnXlAAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDLxAm0nO3rccdoWA6AIBEIB7HUe6+aPvgNu/4sLEXBQVDIJVBueI3q7zdOMBSkRKkgZWqEuQgA6iDuEZbhHhOVCUXPBaLX6QWRwyMmjvIy/2Bg5q+TmwnfRo6QKdw2vee1W32/FdPWIoQy1yKOoIhNy6XMWldS3JuWK8ffQOYkssEqx0V4LW6PKuFv7D"}

data/ext/libmongocrypt/libmongocrypt/test/data/kms-tests.json

@@ -0,0 +1,297 @@
+[
+  {
+    "description": "Successful encryption response",
+    "ctx": ["datakey"],
+    "http_reply": [
+      "HTTP/1.1 200 OK\r\n",
+      "x-amzn-RequestId: deeb35e5-4ecb-4bf1-9af5-84a54ff0af0e\r\n",
+      "Content-Type: application/x-amz-json-1.1\r\n",
+      "Content-Length: 446\r\n",
+      "Connection: close\r\n",
+      "\r\n",
+      "{\"KeyId\": \"arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0\", \"CiphertextBlob\": \"AQICAHhQNmWG2CzOm1dq3kWLM+iDUZhEqnhJwH9wZVpuZ94A8gHCPOT4UQIpMTvAVABLqnXlAAAAwjCBvwYJKoZIhvcNAQcGoIGxMIGuAgEAMIGoBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDLxAm0nO3rccdoWA6AIBEIB7HUe6+aPvgNu/4sLEXBQVDIJVBueI3q7zdOMBSkRKkgZWqEuQgA6iDuEZbhHhOVCUXPBaLX6QWRwyMmjvIy/2Bg5q+TmwnfRo6QKdw2vee1W32/FdPWIoQy1yKOoIhNy6XMWldS3JuWK8ffQOYkssEqx0V4LW6PKuFv7D\"}"
+    ],
+    "expect": "ok"
+  },
+  {
+    "description": "Successful decryption response",
+    "ctx": ["decrypt"],
+    "http_reply": [
+      "HTTP/1.1 200 OK\r\n",
+      "x-amzn-RequestId: deeb35e5-4ecb-4bf1-9af5-84a54ff0af0e\r\n",
+      "Content-Type: application/x-amz-json-1.1\r\n",
+      "Content-Length: 233\r\n",
+      "\r\n",
+      "{\"KeyId\": \"arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0\", \"Plaintext\": \"TqhXy3tKckECjy4/ZNykMWG8amBF46isVPzeOgeusKrwheBmYaU8TMG5AHR/NeUDKukqo8hBGgogiQOVpLPkqBQHD8YkLsNbDmHoGOill5QAHnniF/Lz405bGucB5TfR\"}"
+    ],
+    "expect": "ok"
+  },
+  {
+    "description": "Error message included in body",
+    "ctx": ["datakey", "decrypt"],
+    "http_reply": [
+      "HTTP/1.1 400 Bad Request\r\n",
+      "x-amzn-RequestId: b0e91dc8-3807-11e2-83c6-5912bf8ad066\r\n",
+      "x-amzn-ErrorType: ValidationException\r\n",
+      "Content-Type: application/json\r\n",
+      "Content-Length: 128\r\n",
+      "Date: Mon, 26 Nov 2012 20:27:25 GMT\r\n",
+      "\r\n",
+      "{\"message\":\"1 validation error detected: Value null at 'InstallS3Bucket' failed to satisfy constraint: Member must not be null\"}"
+    ],
+    "expect": "validation error"
+  },
+  {
+    "ctx": ["datakey", "decrypt"],
+    "description": "Empty body",
+    "http_reply": ["HTTP/1.1 500 Internal error\r\n", "\r\n"],
+    "expect": "Error in KMS response. HTTP status=500"
+  },
+  {
+    "ctx": ["datakey", "decrypt"],
+    "description": "Content-Length too large",
+    "http_reply": [
+      "HTTP/1.1 200 Don't worry about it. Everything is ok\r\n",
+      "Content-Length: 1234\r\n",
+      "\r\n",
+      "abc"
+    ],
+    "expect": "KMS response unfinished"
+  },
+  {
+    "ctx": ["datakey", "decrypt"],
+    "description": "Content-Length too small",
+    "http_reply": [
+      "HTTP/1.1 200 Don't worry about it. Everything is ok\r\n",
+      "Content-Length: 1\r\n",
+      "\r\n",
+      "abcasdfasdf"
+    ],
+    "expect": "KMS response fed too much data"
+  },
+  {
+    "ctx": ["datakey", "decrypt"],
+    "description": "Content-Length explicitly 0",
+    "http_reply": [
+      "HTTP/1.1 500 Internal error\r\n",
+      "Content-Length: 0\r\n",
+      "\r\n"
+    ],
+    "expect": "Error in KMS response. HTTP status=500"
+  },
+  {
+    "description": "Non-error non-200 HTTP status",
+    "ctx": ["datakey", "decrypt"],
+    "http_reply": [
+      "HTTP/1.1 100 Continue\r\n",
+      "\r\n"
+    ],
+    "expect": "Unsupported HTTP code in KMS response. HTTP status=100. Response body=\n"
+  },
+  {
+    "description": "Bad JSON in response",
+    "ctx": [
+      "datakey",
+      "decrypt",
+      "azure_oauth_datakey",
+      "azure_oauth_decrypt",
+      "azure_datakey",
+      "azure_decrypt",
+      "gcp_oauth_datakey",
+      "gcp_oauth_decrypt",
+      "gcp_datakey",
+      "gcp_decrypt"
+    ],
+    "http_reply": [
+      "HTTP/1.1 200 OK\r\n",
+      "x-amzn-RequestId: deeb35e5-4ecb-4bf1-9af5-84a54ff0af0e\r\n",
+      "Content-Type: application/x-amz-json-1.1\r\n",
+      "Content-Length: 7\r\n",
+      "\r\n",
+      "BADJSON"
+    ],
+    "expect": [
+      "Error parsing JSON in KMS response 'Got parse error at \"B\", position 0: \"SPECIAL_EXPECTED\"'. HTTP status=200. Response body=\n",
+      "BADJSON"
+    ]
+  },
+  {
+    "description": "Non-numeric status in response",
+    "ctx": ["decrypt"],
+    "http_reply": [
+      "HTTP/1.1 abc OK\r\n",
+      "x-amzn-RequestId: deeb35e5-4ecb-4bf1-9af5-84a54ff0af0e\r\n",
+      "Content-Type: application/x-amz-json-1.1\r\n",
+      "Content-Length: 233\r\n",
+      "\r\n"
+    ],
+    "expect": "Could not parse Status-Code"
+  },
+  {
+    "description": "Status exceeding int range in response",
+    "ctx": ["decrypt"],
+    "http_reply": [
+      "HTTP/1.1 18446744073709551617 OK\r\n",
+      "x-amzn-RequestId: deeb35e5-4ecb-4bf1-9af5-84a54ff0af0e\r\n",
+      "Content-Type: application/x-amz-json-1.1\r\n",
+      "Content-Length: 233\r\n",
+      "\r\n"
+    ],
+    "expect": "Could not parse Status-Code"
+  },
+  {
+    "description": "Successful oauth request",
+    "ctx": ["azure_oauth_datakey", "azure_oauth_decrypt", "gcp_oauth_datakey", "gcp_oauth_decrypt"],
+    "http_reply": [
+      "HTTP/1.1 200 OK\r\n",
+      "Cache-Control: no-store, no-cache\r\n",
+      "Pragma: no-cache\r\n",
+      "Content-Type: application/json; charset=utf-8\r\n",
+      "Expires: -1\r\n",
+      "Strict-Transport-Security: max-age=31536000; includeSubDomains\r\n",
+      "X-Content-Type-Options: nosniff\r\n",
+      "P3P: CP=\"DSP CUR OTPi IND OTRi ONL FIN\"\r\n",
+      "x-ms-request-id: d5f2911d-6574-42fd-bb6f-2e5755ef1200\r\n",
+      "x-ms-ests-server: 2.1.11140.11 - EST ProdSlices\r\n",
+      "Set-Cookie: fpc=Al-86TFxDiZDvC96TyXEMKU9q7ekAQAAAC3jGtcOAAAA; expires=Sun, 15-Nov-2020 00:41:18 GMT; path=/; secure; HttpOnly; SameSite=None\r\n",
+      "Set-Cookie: x-ms-gateway-slice=prod; path=/; secure; samesite=none; httponly\r\n",
+      "Set-Cookie: stsservicecookie=ests; path=/; secure; samesite=none; httponly\r\n",
+      "Date: Fri, 16 Oct 2020 00:41:17 GMT\r\n",
+      "Content-Length: 85\r\n",
+      "\r\n",
+      "{\"token_type\":\"Bearer\",\"expires_in\":3599,\"ext_expires_in\":3599,\"access_token\":\"AAAA\"}"
+    ],
+    "expect": "ok"
+  },
+  {
+    "description": "Invalid client id in Azure oauth request",
+    "ctx": ["azure_oauth_datakey", "azure_oauth_decrypt"],
+    "http_reply": [
+      "HTTP/1.1 400 Bad Request\r\n",
+      "Cache-Control: no-store, no-cache\r\n",
+      "Pragma: no-cache\r\n",
+      "Content-Type: application/json; charset=utf-8\r\n",
+      "Expires: -1\r\n",
+      "Strict-Transport-Security: max-age=31536000; includeSubDomains\r\n",
+      "X-Content-Type-Options: nosniff\r\n",
+      "P3P: CP=\"DSP CUR OTPi IND OTRi ONL FIN\"\r\n",
+      "x-ms-request-id: a1029d4e-fcae-4d24-bb46-ad4f3d8c1200\r\n",
+      "x-ms-ests-server: 2.1.11140.11 - EST ProdSlices\r\n",
+      "Set-Cookie: fpc=At8uDzjFi7ZAqLOAe9gcjXu3BobWAQAAALfoGtcOAAAA; expires=Sun, 15-Nov-2020 01:04:56 GMT; path=/; secure; HttpOnly; SameSite=None\r\n",
+      "Set-Cookie: x-ms-gateway-slice=prod; path=/; secure; samesite=none; httponly\r\n",
+      "Set-Cookie: stsservicecookie=ests; path=/; secure; samesite=none; httponly\r\n",
+      "Date: Fri, 16 Oct 2020 01:04:56 GMT\r\n",
+      "Content-Length: 752\r\n",
+      "\r\n",
+      "{\"error\":\"unauthorized_client\",\"error_description\":\"AADSTS700016: Application with identifier 'CLIENT_ID' was not found in the directory 'a1d0ca08-34e5-4a1b-924d-ef3cea0e4b49'. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You may have sent your authentication request to the wrong tenant.\\r\\nTrace ID: 5458a904-9ab0-4f95-97e5-24f47ca21400\\r\\nCorrelation ID: e43f3081-dd2e-4989-8975-d5e4cdd597c1\\r\\nTimestamp: 2020-10-16 01:11:04Z\",\"error_codes\":[700016],\"timestamp\":\"2020-10-16 01:11:04Z\",\"trace_id\":\"5458a904-9ab0-4f95-97e5-24f47ca21400\",\"correlation_id\":\"e43f3081-dd2e-4989-8975-d5e4cdd597c1\",\"error_uri\":\"https://login.microsoftonline.com/error?code=700016\"}"
+    ],
+    "expect": "Application with identifier 'CLIENT_ID' was not found"
+  },
+  {
+    "description": "GCP invalid signature",
+    "ctx": ["gcp_oauth_datakey", "gcp_oauth_decrypt"],
+    "http_reply": [
+      "HTTP/1.1 400 Bad Request\r\n",
+      "Content-Type: application/json; charset=UTF-8\r\n",
+      "Vary: X-Origin\r\n",
+      "Vary: Referer\r\n",
+      "Date: Fri, 16 Oct 2020 01:22:34 GMT\r\n",
+      "Server: scaffolding on HTTPServer2\r\n",
+      "Cache-Control: private\r\n",
+      "X-XSS-Protection: 0\r\n",
+      "X-Frame-Options: SAMEORIGIN\r\n",
+      "X-Content-Type-Options: nosniff\r\n",
+      "Alt-Svc: h3-Q050=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-27=\":443\"; ma=2592000,h3-T051=\":443\"; ma=2592000,h3-T050=\":443\"; ma=2592000,h3-Q046=\":443\"; ma=2592000,h3-Q043=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\n",
+      "Accept-Ranges: none\r\n",
+      "Vary: Origin,Accept-Encoding\r\n",
+      "Transfer-Encoding: chunked\r\n",
+      "\r\n",
+      "46\r\n",
+      "{\"error\":\"invalid_grant\",\"error_description\":\"Invalid JWT Signature.\"}\r\n",
+      "0\r\n",
+      "\r\n"
+    ],
+    "expect": "Invalid JWT Signature"
+  },
+  {
+    "description": "GCP invalid ciphertext",
+    "ctx": ["gcp_datakey", "gcp_decrypt"],
+    "http_reply": [
+      "HTTP/1.1 400 Bad Request\r\n",
+      "Alt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,h3-Q046=\":443\"; ma=2592000,h3-Q043=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\n",
+      "Cache-Control: private\r\n",
+      "Content-Encoding: gzip\r\n",
+      "Content-Type: application/json; charset=UTF-8\r\n",
+      "Date: Wed, 20 Jul 2022 17:36:54 GMT\r\n",
+      "Server: ESF\r\n",
+      "Transfer-Encoding: chunked\r\n",
+      "Vary: Origin, X-Origin, Referer\r\n",
+      "X-Content-Type-Options: nosniff\r\n",
+      "X-Frame-Options: SAMEORIGIN\r\n",
+      "X-XSS-Protection: 0\r\n",
+      "\r\n",
+      "87\r\n",
+      "{\n",
+      "  \"error\": {\n",
+      "    \"code\": 400,\n",
+      "    \"message\": \"Decryption failed: the ciphertext is invalid.\",\n",
+      "    \"status\": \"INVALID_ARGUMENT\"\n",
+      "  }\n",
+      "}\n",
+      "\r\n",
+      "0\r\n",
+      "\r\n"      
+    ],
+    "expect": [
+      "Error in KMS response. HTTP status=400. Response body=\n",
+      "{\n",
+      "  \"error\": {\n",
+      "    \"code\": 400,\n",
+      "    \"message\": \"Decryption failed: the ciphertext is invalid.\",\n",
+      "    \"status\": \"INVALID_ARGUMENT\"\n",
+      "  }\n",
+      "}\n"
+    ]
+  },
+  {
+    "description": "JSON in response missing needed field",
+    "ctx": [
+      "datakey",
+      "decrypt",
+      "azure_oauth_datakey",
+      "azure_oauth_decrypt",
+      "azure_datakey",
+      "azure_decrypt",
+      "gcp_oauth_datakey",
+      "gcp_oauth_decrypt",
+      "gcp_datakey",
+      "gcp_decrypt"
+    ],
+    "http_reply": [
+      "HTTP/1.1 200 OK\r\n",
+      "x-amzn-RequestId: deeb35e5-4ecb-4bf1-9af5-84a54ff0af0e\r\n",
+      "Content-Type: application/x-amz-json-1.1\r\n",
+      "Content-Length: 8\r\n",
+      "\r\n",
+      "{\"x\": 1}"
+    ],
+    "expect": [
+      "HTTP status=200. Response body=\n",
+      "{\"x\": 1}"
+    ]
+  },
+  {
+    "description": "Encryption response with invalid base64",
+    "ctx": ["datakey"],
+    "http_reply": [
+      "HTTP/1.1 200 OK\r\n",
+      "x-amzn-RequestId: deeb35e5-4ecb-4bf1-9af5-84a54ff0af0e\r\n",
+      "Content-Type: application/x-amz-json-1.1\r\n",
+      "Content-Length: 111\r\n",
+      "Connection: close\r\n",
+      "\r\n",
+      "{\"KeyId\": \"arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0\", \"CiphertextBlob\": \"A\"}"
+    ],
+    "expect": "Failed to base64 decode"
+  }
+]

data/ext/libmongocrypt/libmongocrypt/test/data/mongocryptd-cmd.json

@@ -0,0 +1,26 @@
+{
+    "find": "test",
+    "filter": {
+        "ssn": "457-55-5462"
+    },
+    "jsonSchema": {
+        "properties": {
+            "ssn": {
+                "encrypt": {
+                    "keyId": [
+                        {
+                            "$binary": {
+                                "base64": "YWFhYWFhYWFhYWFhYWFhYQ==",
+                                "subType": "04"
+                            }
+                        }
+                    ],
+                    "bsonType": "string",
+                    "algorithm": "AEAD_AES_256_CBC_HMAC_SHA_512-Deterministic"
+                }
+            }
+        },
+        "bsonType": "object"
+    },
+    "isRemoteSchema": true
+}

data/ext/libmongocrypt/libmongocrypt/test/data/mongocryptd-reply-existing-ciphertext.json

@@ -0,0 +1,24 @@
+{
+    "schemaRequiresEncryption": true, 
+    "ok": {
+        "$numberInt": "1"
+    }, 
+    "result": {
+        "filter": {
+            "ssn": {
+                "$binary": {
+                    "base64": "ADgAAAAQYQABAAAABWtpABAAAAAEYWFhYWFhYWFhYWFhYWFhYQJ2AAwAAAA0NTctNTUtNTQ2MgAA", 
+                    "subType": "06"
+                }
+            },
+            "existing_ciphertext": {
+                "$binary": {
+                    "base64": "AgFkgAAAAAAAAAAAAAAAAAABm5MUrpGaLc8+PUdwNPpanCc3Jk1Ql+URqTAZV0IPhLTiw0JkZTN8gcNjA0PGjUwGzR08ZIeDhreuVLvKnX+jZw==",
+                    "subType": "06"
+                }
+            }
+        }, 
+        "find": "test"
+    }, 
+    "hasEncryptedPlaceholders": true
+}

data/ext/libmongocrypt/libmongocrypt/test/data/mongocryptd-reply-invalid.json

@@ -0,0 +1,18 @@
+{
+    "schemaRequiresEncryption": true, 
+    "ok": {
+        "$numberInt": "1"
+    }, 
+    "result": {
+        "filter": {
+            "ssn": {
+                "$binary": {
+                    "base64": "ACUAAAAQYQABAAAABWtpABAAAAAEYWFhYWFhYWFhYWFhYWFhYQA=", 
+                    "subType": "06"
+                }
+            }
+        }, 
+        "find": "test"
+    }, 
+    "hasEncryptedPlaceholders": true
+}

data/ext/libmongocrypt/libmongocrypt/test/data/mongocryptd-reply-key-alt-name.json

@@ -0,0 +1,18 @@
+{
+    "schemaRequiresEncryption": true, 
+    "ok": {
+        "$numberInt": "1"
+    }, 
+    "result": {
+        "filter": {
+            "ssn": {
+                "$binary": {
+                    "base64": "ADAAAAAQYQABAAAAAmthAAkAAABTaGFybGVuZQACdgAMAAAANDU3LTU1LTU0NjIAAA==", 
+                    "subType": "06"
+                }
+            }
+        }, 
+        "find": "test"
+    }, 
+    "hasEncryptedPlaceholders": true
+}

data/ext/libmongocrypt/libmongocrypt/test/data/mongocryptd-reply-key-alt-name2.json

@@ -0,0 +1,18 @@
+{
+    "schemaRequiresEncryption": true, 
+    "ok": {
+        "$numberInt": "1"
+    }, 
+    "result": {
+        "filter": {
+            "ssn": {
+                "$binary": {
+                    "base64": "ADgAAAAQYQABAAAAAmthABEAAABBbm90aGVyIGFsdCBuYW1lAAJ2AAwAAAA0NTctNTUtNTQ2MgAA", 
+                    "subType": "06"
+                }
+            }
+        }, 
+        "find": "test"
+    }, 
+    "hasEncryptedPlaceholders": true
+}