WARNING: gnome-keyring ??

Stef Walter stefw at gnome.org
Thu Nov 8 12:31:27 CET 2012


On 11/08/2012 10:41 AM, Nikos Mavrogiannopoulos wrote:
> The approach seems correct to disable PKCS #11. I should also document
> it if it is not already there. However, were the requests to disable
> PKCS #11 due to the messages being printed by gnome-keyring, or
> because of some other reason?

FWIW, It is also possible to only enable PKCS#11 in certain applications
via the p11-kit configuration:

http://p11-glue.freedesktop.org/doc/p11-kit/config-module.html

This can be done either globally by the admin of a system or for a
specific user.

> If it is the former could the gnome-keyring module be more silent on
> failures and print messages only if some debugging environment
> variable is present?

Yes, that's what this committed fix accomplishes:

https://bugzilla.gnome.org/show_bug.cgi?id=665961

No messages are printed if the daemon cannot be connected to. If a debug
environment variable is set, then the messages are printed.

If the (begnign, but misleading) warnings are too bothersome, you could
try out the patch and comment on the bug? That would help distros know
how tested the patch is, and whether to backport it.

Cheers,

Stef




More information about the Gnutls-help mailing list