PKCS#11 RPC code (and sharing PKCS#11 login state)

Stef Walter stefw at gnome.org
Mon Aug 27 09:51:33 PDT 2012


On 08/27/2012 06:44 PM, Nikos Mavrogiannopoulos wrote:
> On 08/27/2012 11:06 AM, Stef Walter wrote:
> 
>> I've taken time to factor out the gnome-keyring PKCS#11 RPC code and put
>> it into p11-kit. If you're interested, the bug for that is here:
>>
>> https://bugs.freedesktop.org/show_bug.cgi?id=54105
>>
>> One of the things that this enables is the ability to run certain
>> PKCS#11 modules in a daemon and share the login state per desktop
>> session. Think: login using smart card, and then use smart card with
>> firefox without entering PIN again.
> 
> 
> That sounds very nice. I suppose it would also help to reduce module
> initialization time which is now 2-3 seconds per module. Is that backend
> transparent to users of p11-kit or do they have to be aware of it (I
> haven't checked the code yet)?

It would be transparent. I haven't posted the code of the daemon yet ...
working on cleaning that up yet.

Cheers,

Stef


More information about the p11-glue mailing list