[gnutls-devel] GnuTLS | pkcs11-provider: rework to share the code with the existing PKCS#11 support (!2018)

[Read-only notification of GnuTLS library development activities]

Merge request https://gitlab.com/gnutls/gnutls/-/merge_requests/2018 was reviewed by Alexander Sosedkin

--
  
Alexander Sosedkin started a new discussion on lib/pkcs11/p11_mac.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/2018#note_2758535896

 >  
 > -	params.bExtract = CK_TRUE;
 > +	params.bExtract = true;

these attrnames are guarded by `CRYPTOKI_COMPAT`, which are supposed to be disabled by `CRYPTOKI_GNU`, unless specifically enabled back... how do they work? were they supposed to be changed to non-compat ones?

--
  
Alexander Sosedkin started a new discussion on doc/cha-config.texi: https://gitlab.com/gnutls/gnutls/-/merge_requests/2018#note_2758535908

 >  @itemize
 > - at item @code{path}: path to the PKCS#11 module.
 > + at item @code{url}: URL of the PKCS#11 module.

if we need to support both names, we might need tests for that. if we can drop support for the old name, we need to be louder about the breakage, since that went into 3.8.10

--
  
Alexander Sosedkin started a new discussion on tests/pkcs11-provider/test-pkcs11-provider.sh: https://gitlab.com/gnutls/gnutls/-/merge_requests/2018#note_2758535917

 >  [provider]
 > -path = ${MODULE}
 > +url = pkcs11:model=v1;manufacturer=Kryoptic%20Project;token=Kryoptic%20Token

I guess a CI job that exercises it is overdue

--
  
Alexander Sosedkin started a new discussion on tests/pkcs11-provider/test-pkcs11-provider.sh: https://gitlab.com/gnutls/gnutls/-/merge_requests/2018#note_2758535923

 > -KRYOPTIC_DB="${testdir}/kryoptic.$$.sql"
 > -export KRYOPTIC_CONF="${testdir}/kryoptic.$$.conf"
 > +PRIORITY_FILE="${testdir}/gnutls.conf"

why drop `$$`, if the testdir is not test-unique? or does it depend on no other tests using gnutls.conf?


-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2018
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20250917/263e54ad/attachment.html>