Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add socket based server #15

Merged
merged 5 commits into from
Feb 17, 2017
Merged

Add socket based server #15

merged 5 commits into from
Feb 17, 2017

Commits on Feb 17, 2017

  1. common: New p11_get_upeer_id() function

    @ueno
    Nikos Mavrogiannopoulos authored and ueno committed Feb 17, 2017
    Configuration menu
    Copy the full SHA
    56ecdd9 View commit details
    Browse the repository at this point in the history

  2. p11-kit: Add 'p11-kit server' command 

    This adds a new tool to the p11-kit command called 'server', which
allows us to access a PKCS#11 module over a Unix domain socket.

Internally, it is implemented as a wrapper around 'p11-kit remote'.
Upon connection it executes 'p11-kit remote' in a forked process.
    @ueno
    Nikos Mavrogiannopoulos authored and ueno committed Feb 17, 2017
    Configuration menu
    Copy the full SHA
    4d74971 View commit details
    Browse the repository at this point in the history

  3. remote, server: Recognize PKCS#11 URI

    @ueno
    ueno committed Feb 17, 2017
    Configuration menu
    Copy the full SHA
    786323f View commit details
    Browse the repository at this point in the history

  4. remote: Add API to serve a token

    @ueno
    ueno committed Feb 17, 2017
    Configuration menu
    Copy the full SHA
    3693280 View commit details
    Browse the repository at this point in the history

  5. rpc: Add PKCS#11 module that connects to socket 

    This patch adds a PKCS#11 module that connects to the p11-kit server
exposed on the filesystem.  The filename of the socket is determined in
the following order:

- $P11_KIT_SERVER_ADDRESS, if the envvar is available
- $XDG_RUNTIME_DIR/p11-kit/pkcs11, if the envvar is available
- /run/$(id -u)/p11-kit/pkcs11, if /run/$(id -u) exists
- /var/run/$(id -u)/p11-kit/pkcs11, if /var/run/$(id -u) exists
- ~/.cache/p11-kit/pkcs11.

Note that the program loading this module may have called setuid() and
secure_getenv() which we use for fetching envvars could return NULL.
    @ueno
    ueno committed Feb 17, 2017
    Configuration menu
    Copy the full SHA
    dadaf2a View commit details
    Browse the repository at this point in the history