NetworkManager & PKCS#11 remoting

Nikos Mavrogiannopoulos nmav at redhat.com
Tue Jun 21 13:01:28 UTC 2016


On Tue, 2016-06-21 at 12:35 +0100, David Woodhouse wrote:
> Or (and I thought of this as writing up, so we've moved on from the
> bit
> I discussed with Nikos and was trying to summarise) perhaps we could
> use a vendor-specific attribute like 'v-remote-fd=5' in the URI.

This may not be workable. p11-kit does only the parsing of the URL but
does not pass info to the underlying module or so. Thus even if it
could see v-remote-fd=5, I don't think it could do anything useful with
it (except of course setting an environment variable).

For module-path, the story is the same, but in that case applications
and libs that use it (such as gnutls) most likely will support it
directly once p11-kit can parse it. 

regards,
Nikos



More information about the p11-glue mailing list