PKCS#11 RPC code (and sharing PKCS#11 login state)

Nikos Mavrogiannopoulos nmav at gnutls.org
Mon Aug 27 09:44:10 PDT 2012


On 08/27/2012 11:06 AM, Stef Walter wrote:

> I've taken time to factor out the gnome-keyring PKCS#11 RPC code and put
> it into p11-kit. If you're interested, the bug for that is here:
> 
> https://bugs.freedesktop.org/show_bug.cgi?id=54105
> 
> One of the things that this enables is the ability to run certain
> PKCS#11 modules in a daemon and share the login state per desktop
> session. Think: login using smart card, and then use smart card with
> firefox without entering PIN again.


That sounds very nice. I suppose it would also help to reduce module
initialization time which is now 2-3 seconds per module. Is that backend
transparent to users of p11-kit or do they have to be aware of it (I
haven't checked the code yet)?

regards,
Nikos



More information about the p11-glue mailing list