Fixing NSS and p11-kit in Fedora (and beyond)

[David Woodhouse]

On Fri, 2014-12-12 at 14:44 +0100, Stef Walter wrote:
> > Joy. Remind me again why you're happy for NSS softokn to be one of the
> > default writable tokens on the system and ditch that functionality from
> > gnome-keyring-pkcs11? :)
> 
> Because I don't have time to maintain it, or finish it, and the
> implementation is woefully incomplete. It was short sighted of me to
> think I could implement something complete.

Fair enough. Although with the patch I just filed it's working fairly
nicely now from Firefox. What major things are missing?

> But p11-kit has the functionality to remote PKCS#11 now ... with more
> work on it's way (thanks Nikos). It could (with a bit more work) run
> PKCS#11 modules in a daemon ... coordinate their writability etc.

Or maybe we should just grit our teeth and enable nsssoftokn3.so in
$HOME/.pki/nssdb in the default p11-kit configuration? That'll probably
be a whole lot easier to coordinate with NSS applications.

-- 
dwmw2
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5745 bytes
Desc: not available
URL: <http://lists.freedesktop.org/archives/p11-glue/attachments/20141212/b3a0c751/attachment.bin>