[gnutls-devel] GnuTLS | pkcs11-provider: rework to share the code with the existing PKCS#11 support (!2018)

[Read-only notification of GnuTLS library development activities]

Merge request https://gitlab.com/gnutls/gnutls/-/merge_requests/2018 was reviewed by Daiki Ueno

--
  
Daiki Ueno commented on a discussion on lib/pkcs11/p11_mac.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/2018#note_2759339090

 >  
 > -	params.bExtract = CK_TRUE;
 > +	params.bExtract = true;

Good catch. This part was simply compiled out on the CI, as it is guarded with `#ifdef CKM_HKDF_DERIVE`, which p11-kit 0.25.5 doesn't have it.

--
  
Daiki Ueno commented on a discussion on doc/cha-config.texi: https://gitlab.com/gnutls/gnutls/-/merge_requests/2018#note_2759339095

 >  @itemize
 > - at item @code{path}: path to the PKCS#11 module.
 > + at item @code{url}: URL of the PKCS#11 module.

I wouldn't say it's a breakage, as this feature is marked as "experimental", but I added an entry in NEWS.

--
  
Daiki Ueno commented on a discussion on tests/pkcs11-provider/test-pkcs11-provider.sh: https://gitlab.com/gnutls/gnutls/-/merge_requests/2018#note_2759339098

 >  [provider]
 > -path = ${MODULE}
 > +url = pkcs11:model=v1;manufacturer=Kryoptic%20Project;token=Kryoptic%20Token

This would require a bump of CI image to Fedora 42, so I'd leave it for now.


-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2018
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20250918/dc299e8b/attachment.html>