Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1572969

Re: [PATCH 0/1] Load OpenSSL config if present in sign-file.c

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Fri, 2017-02-03 at 10:23 +0100, Antony Vennard wrote:
> On 03/02/17 10:07, David Woodhouse wrote:
> > You should[n't] need any of the special OpenSSL config horridness.

> Ah, I did not even know that was a thing. I do now. That looks like a
> much neater solution. Forget this patch then :)

As a general rule, this is true of *every* well-behaved application in
a Linux system.

If you have a PKCS#11 provider configured with a p11-kit .module file,
then it should automatically be usable just by providing a suitable
RFC7512 PKCS#11 URI in place of a filename.

If you find any application which can't do that on Fedora, file a bug
and Cc me. It's violating the packaging guidelines.

Other distributions may catch up in a decade or two (hey, I hear Debian
might even get coherent SSL trust settings by 2020...)

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

[PATCH 0/1] Load OpenSSL config if present in sign-file.c Antony Vennard <antony@vennard.ch> - 2017-02-03 02:40 +0100
  [PATCH 1/1] Load OpenSSL config if present in sign-file.c Antony Vennard <antony@vennard.ch> - 2017-02-03 02:50 +0100
  Re: [PATCH 0/1] Load OpenSSL config if present in sign-file.c David Woodhouse <dwmw2@infradead.org> - 2017-02-03 10:10 +0100
    Re: [PATCH 0/1] Load OpenSSL config if present in sign-file.c Antony Vennard <antony@vennard.ch> - 2017-02-03 10:30 +0100
      Re: [PATCH 0/1] Load OpenSSL config if present in sign-file.c David Woodhouse <dwmw2@infradead.org> - 2017-02-03 10:40 +0100

csiph-web