NetworkManager & PKCS#11 remoting

Nikos Mavrogiannopoulos nmav at redhat.com
Tue Jun 21 07:39:46 UTC 2016


On Mon, 2016-06-20 at 15:07 +0100, David Woodhouse wrote:
> On Mon, 2016-06-20 at 15:50 +0200, Lubomir Rintel wrote:
> > 
> > 
> > Another problem is that the p11-kit-remote tool needs a module
> > name;
> > but the VPN daemon only knows the PKCS#11 URI. Would it make sense
> > to
> > extend the tool to do the resolution as well? [3]
> > 
> > [3] https://github.com/NetworkManager/p11-kit/commit/254ae1a6.patch
> No. It should be using p11-kit-proxy.so (or loading the full set of
> modules as indicated by the p11-kit config).

Why is that? Why not resolve the URL provided and remote only the
required module?

regards,
Nikos



More information about the p11-glue mailing list