support reading PIN from file when using PKCS#11 devices

Bug #929108 reported by David Smith
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
gnutls26 (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

gnutls26 is supposed to support specifying a "pinfile" when using PKCS#11 devices, in order to not need to type the PIN (often a trivial well-known entity like "000000") directly e.g. for use in daemons.

p11-kit changed its handling of pinfile and gnutls needs to be patched for this.

Without a small change, pinfiles are completely unsupported and PINs must be input directly for every use.

The change in the attached patch restores the original functionality from before p11-kit changed, making it at least work for files as documented in http://tools.ietf.org/html/draft-pechanec-pkcs11uri-04. It would be a shame to ship without this in precise.

The same patch, with small modification, can also be applied to gnutls28.

Tags: patch
Revision history for this message
David Smith (dds) wrote :
Revision history for this message
Ubuntu Foundations Team Bug Bot (crichton) wrote :

The attachment "Add back basic pinfile support." of this bug report has been identified as being a patch. The ubuntu-reviewers team has been subscribed to the bug report so that they can review the patch. In the event that this is in fact not a patch you can resolve this situation by removing the tag 'patch' from the bug report and editing the attachment so that it is not flagged as a patch. Additionally, if you are member of the ubuntu-reviewers team please also unsubscribe the team from this bug report.

[This is an automated message performed by a Launchpad user owned by Brian Murray. Please contact him regarding any issues with the action taken in this bug report.]

tags: added: patch
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in gnutls26 (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.