glib2 3.2.5-x64-mingw32 → 3.2.6-x64-mingw32
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/COPYING.LIB +502 -0
- data/README.md +42 -0
- data/Rakefile +8 -7
- data/ext/glib2/glib2.def +5 -0
- data/ext/glib2/rbglib-gc.c +89 -0
- data/ext/glib2/rbglib-variant-type.c +17 -0
- data/ext/glib2/rbglib.c +3 -0
- data/ext/glib2/rbglib.h +6 -1
- data/ext/glib2/rbglib2conversions.h +1 -1
- data/ext/glib2/rbgobj_boxed.c +49 -30
- data/ext/glib2/rbgobj_closure.c +3 -2
- data/ext/glib2/rbgobj_convert.c +1 -2
- data/ext/glib2/rbgobj_enums.c +32 -14
- data/ext/glib2/rbgobj_flags.c +31 -14
- data/ext/glib2/rbgobj_param.c +43 -23
- data/ext/glib2/rbgobj_signal.c +78 -66
- data/ext/glib2/rbgobj_type.c +22 -10
- data/ext/glib2/rbgobject.h +2 -0
- data/ext/glib2/rbgprivate.h +11 -0
- data/glib2.gemspec +48 -0
- data/lib/2.2/glib2.so +0 -0
- data/lib/2.3/glib2.so +0 -0
- data/lib/2.4/glib2.so +0 -0
- data/lib/2.5/glib2.so +0 -0
- data/lib/gnome2/rake/package-task.rb +17 -5
- data/lib/gnome2/rake/package.rb +2 -2
- data/lib/gnome2/rake/windows-binary-build-task.rb +39 -6
- data/lib/mkmf-gnome2.rb +4 -3
- data/sample/bookmarkfile.rb +2 -2
- data/sample/type-register.rb +6 -6
- data/sample/type-register2.rb +6 -6
- data/test/{test_enum.rb → test-enum.rb} +0 -0
- data/test/{test_file_utils.rb → test-file-utils.rb} +0 -0
- data/test/{test_flags.rb → test-flags.rb} +0 -0
- data/test/{test_glib2.rb → test-glib2.rb} +0 -0
- data/test/{test_key_file.rb → test-key-file.rb} +0 -0
- data/test/{test_mkenums.rb → test-mkenums.rb} +0 -0
- data/test/{test_poll_fd.rb → test-poll-fd.rb} +0 -0
- data/test/{test_signal.rb → test-signal.rb} +34 -2
- data/test/{test_source.rb → test-source.rb} +0 -0
- data/test/{test_spawn.rb → test-spawn.rb} +0 -0
- data/test/{test_timeout.rb → test-timeout.rb} +0 -0
- data/test/{test_unicode.rb → test-unicode.rb} +0 -0
- data/test/{test_utils.rb → test-utils.rb} +0 -0
- data/test/{test_value.rb → test-value.rb} +0 -0
- data/test/test-variant.rb +27 -0
- data/test/{test_win32.rb → test-win32.rb} +0 -0
- data/vendor/local/bin/asn1Coding.exe +0 -0
- data/vendor/local/bin/asn1Decoding.exe +0 -0
- data/vendor/local/bin/asn1Parser.exe +0 -0
- data/vendor/local/bin/envsubst.exe +0 -0
- data/vendor/local/bin/gdbus.exe +0 -0
- data/vendor/local/bin/gettext.exe +0 -0
- data/vendor/local/bin/gio-querymodules.exe +0 -0
- data/vendor/local/bin/gio.exe +0 -0
- data/vendor/local/bin/glib-compile-resources.exe +0 -0
- data/vendor/local/bin/glib-compile-schemas.exe +0 -0
- data/vendor/local/bin/glib-genmarshal +1 -1
- data/vendor/local/bin/glib-gettextize +1 -1
- data/vendor/local/bin/glib-mkenums +4 -2
- data/vendor/local/bin/gobject-query.exe +0 -0
- data/vendor/local/bin/gresource.exe +0 -0
- data/vendor/local/bin/gsettings.exe +0 -0
- data/vendor/local/bin/gspawn-win64-helper-console.exe +0 -0
- data/vendor/local/bin/gspawn-win64-helper.exe +0 -0
- data/vendor/local/bin/iconv.exe +0 -0
- data/vendor/local/bin/idn2.exe +0 -0
- data/vendor/local/bin/libasprintf-0.dll +0 -0
- data/vendor/local/bin/libcharset-1.dll +0 -0
- data/vendor/local/bin/libffi-6.dll +0 -0
- data/vendor/local/bin/libgio-2.0-0.dll +0 -0
- data/vendor/local/bin/libglib-2.0-0.dll +0 -0
- data/vendor/local/bin/libgmodule-2.0-0.dll +0 -0
- data/vendor/local/bin/libgmp-10.dll +0 -0
- data/vendor/local/bin/libgnutls-30.dll +0 -0
- data/vendor/local/bin/libgobject-2.0-0.dll +0 -0
- data/vendor/local/bin/libgthread-2.0-0.dll +0 -0
- data/vendor/local/bin/libhogweed-4-2.dll +0 -0
- data/vendor/local/bin/libiconv-2.dll +0 -0
- data/vendor/local/bin/libidn2-0.dll +0 -0
- data/vendor/local/bin/libintl-8.dll +0 -0
- data/vendor/local/bin/libnettle-6-2.dll +0 -0
- data/vendor/local/bin/libp11-kit-0.dll +0 -0
- data/vendor/local/bin/libpcre-1.dll +0 -0
- data/vendor/local/bin/libpcrecpp-0.dll +0 -0
- data/vendor/local/bin/libpcreposix-0.dll +0 -0
- data/vendor/local/bin/libtasn1-6.dll +0 -0
- data/vendor/local/bin/nettle-hash.exe +0 -0
- data/vendor/local/bin/nettle-lfib-stream.exe +0 -0
- data/vendor/local/bin/nettle-pbkdf2.exe +0 -0
- data/vendor/local/bin/ngettext.exe +0 -0
- data/vendor/local/bin/p11-kit.exe +0 -0
- data/vendor/local/bin/pcregrep.exe +0 -0
- data/vendor/local/bin/pcretest.exe +0 -0
- data/vendor/local/bin/pkcs1-conv.exe +0 -0
- data/vendor/local/bin/sexp-conv.exe +0 -0
- data/vendor/local/bin/trust.exe +0 -0
- data/vendor/local/include/idn2.h +5 -3
- data/vendor/local/include/p11-kit-1/p11-kit/iter.h +25 -1
- data/vendor/local/include/p11-kit-1/p11-kit/p11-kit.h +6 -0
- data/vendor/local/include/p11-kit-1/p11-kit/pkcs11.h +133 -4
- data/vendor/local/include/p11-kit-1/p11-kit/pkcs11x.h +1 -0
- data/vendor/local/include/p11-kit-1/p11-kit/remote.h +15 -0
- data/vendor/local/include/p11-kit-1/p11-kit/uri.h +32 -12
- data/vendor/local/lib/gio/modules/libgiognutls.dll +0 -0
- data/vendor/local/lib/glib-2.0/include/glibconfig.h +1 -1
- data/vendor/local/lib/libasprintf.a +0 -0
- data/vendor/local/lib/libasprintf.dll.a +0 -0
- data/vendor/local/lib/libasprintf.la +1 -1
- data/vendor/local/lib/libcharset.a +0 -0
- data/vendor/local/lib/libcharset.dll.a +0 -0
- data/vendor/local/lib/libcharset.la +1 -1
- data/vendor/local/lib/libffi.dll.a +0 -0
- data/vendor/local/lib/libffi.la +1 -1
- data/vendor/local/lib/libgio-2.0.dll.a +0 -0
- data/vendor/local/lib/libgio-2.0.la +2 -2
- data/vendor/local/lib/libglib-2.0.dll.a +0 -0
- data/vendor/local/lib/libglib-2.0.la +2 -2
- data/vendor/local/lib/libgmodule-2.0.dll.a +0 -0
- data/vendor/local/lib/libgmodule-2.0.la +2 -2
- data/vendor/local/lib/libgmp.dll.a +0 -0
- data/vendor/local/lib/libgnutls.dll.a +0 -0
- data/vendor/local/lib/libgnutls.la +1 -1
- data/vendor/local/lib/libgobject-2.0.dll.a +0 -0
- data/vendor/local/lib/libgobject-2.0.la +2 -2
- data/vendor/local/lib/libgthread-2.0.dll.a +0 -0
- data/vendor/local/lib/libgthread-2.0.la +2 -2
- data/vendor/local/lib/libhogweed.dll.a +0 -0
- data/vendor/local/lib/libiconv.dll.a +0 -0
- data/vendor/local/lib/libiconv.la +1 -1
- data/vendor/local/lib/libidn2.a +0 -0
- data/vendor/local/lib/libidn2.dll.a +0 -0
- data/vendor/local/lib/libidn2.la +2 -2
- data/vendor/local/lib/libintl.a +0 -0
- data/vendor/local/lib/libintl.dll.a +0 -0
- data/vendor/local/lib/libintl.la +1 -1
- data/vendor/local/lib/libnettle.dll.a +0 -0
- data/vendor/local/lib/libp11-kit.dll.a +0 -0
- data/vendor/local/lib/libp11-kit.la +3 -3
- data/vendor/local/lib/libpcre.a +0 -0
- data/vendor/local/lib/libpcre.dll.a +0 -0
- data/vendor/local/lib/libpcre.la +1 -1
- data/vendor/local/lib/libpcrecpp.dll.a +0 -0
- data/vendor/local/lib/libpcrecpp.la +1 -1
- data/vendor/local/lib/libpcreposix.a +0 -0
- data/vendor/local/lib/libpcreposix.dll.a +0 -0
- data/vendor/local/lib/libpcreposix.la +1 -1
- data/vendor/local/lib/libtasn1.dll.a +0 -0
- data/vendor/local/lib/pkcs11/p11-kit-trust.dll +0 -0
- data/vendor/local/lib/pkcs11/p11-kit-trust.dll.a +0 -0
- data/vendor/local/lib/pkcs11/p11-kit-trust.la +3 -3
- data/vendor/local/lib/pkgconfig/gio-2.0.pc +1 -1
- data/vendor/local/lib/pkgconfig/gio-windows-2.0.pc +1 -1
- data/vendor/local/lib/pkgconfig/glib-2.0.pc +1 -1
- data/vendor/local/lib/pkgconfig/gmodule-2.0.pc +1 -1
- data/vendor/local/lib/pkgconfig/gmodule-export-2.0.pc +1 -1
- data/vendor/local/lib/pkgconfig/gmodule-no-export-2.0.pc +1 -1
- data/vendor/local/lib/pkgconfig/gobject-2.0.pc +1 -1
- data/vendor/local/lib/pkgconfig/gthread-2.0.pc +1 -1
- data/vendor/local/lib/pkgconfig/libidn2.pc +1 -1
- data/vendor/local/lib/pkgconfig/p11-kit-1.pc +1 -1
- data/vendor/local/libexec/p11-kit/p11-kit-remote.exe +0 -0
- data/vendor/local/libexec/p11-kit/p11-kit-server.exe +0 -0
- data/vendor/local/share/gdb/auto-load/home/vagrant/ruby-gnome2/glib2/vendor/local/lib/{libglib-2.0.so.0.5600.0-gdb.py → libglib-2.0.so.0.5600.1-gdb.py} +0 -0
- data/vendor/local/share/gdb/auto-load/home/vagrant/ruby-gnome2/glib2/vendor/local/lib/{libgobject-2.0.so.0.5600.0-gdb.py → libgobject-2.0.so.0.5600.1-gdb.py} +0 -0
- data/vendor/local/share/glib-2.0/codegen/__init__.pyc +0 -0
- data/vendor/local/share/glib-2.0/codegen/__init__.pyo +0 -0
- data/vendor/local/share/glib-2.0/codegen/codegen.pyc +0 -0
- data/vendor/local/share/glib-2.0/codegen/codegen.pyo +0 -0
- data/vendor/local/share/glib-2.0/codegen/codegen_docbook.pyc +0 -0
- data/vendor/local/share/glib-2.0/codegen/codegen_docbook.pyo +0 -0
- data/vendor/local/share/glib-2.0/codegen/codegen_main.pyc +0 -0
- data/vendor/local/share/glib-2.0/codegen/codegen_main.pyo +0 -0
- data/vendor/local/share/glib-2.0/codegen/config.py +1 -1
- data/vendor/local/share/glib-2.0/codegen/config.pyc +0 -0
- data/vendor/local/share/glib-2.0/codegen/config.pyo +0 -0
- data/vendor/local/share/glib-2.0/codegen/dbustypes.pyc +0 -0
- data/vendor/local/share/glib-2.0/codegen/dbustypes.pyo +0 -0
- data/vendor/local/share/glib-2.0/codegen/parser.pyc +0 -0
- data/vendor/local/share/glib-2.0/codegen/parser.pyo +0 -0
- data/vendor/local/share/glib-2.0/codegen/utils.pyc +0 -0
- data/vendor/local/share/glib-2.0/codegen/utils.pyo +0 -0
- data/vendor/local/share/glib-2.0/gdb/gobject_gdb.py +1 -1
- data/vendor/local/share/gtk-doc/html/gio/GApplication.html +35 -13
- data/vendor/local/share/gtk-doc/html/gio/gio.html +0 -4
- data/vendor/local/share/gtk-doc/html/gio/index.html +1 -1
- data/vendor/local/share/gtk-doc/html/glib/glib-Commandline-option-parser.html +2 -2
- data/vendor/local/share/gtk-doc/html/glib/glib-Doubly-Linked-Lists.html +2 -2
- data/vendor/local/share/gtk-doc/html/glib/glib-Error-Reporting.html +1 -1
- data/vendor/local/share/gtk-doc/html/glib/glib-File-Utilities.html +1 -1
- data/vendor/local/share/gtk-doc/html/glib/glib-GVariant.html +2 -2
- data/vendor/local/share/gtk-doc/html/glib/glib-Keyed-Data-Lists.html +3 -3
- data/vendor/local/share/gtk-doc/html/glib/glib-Memory-Allocation.html +3 -3
- data/vendor/local/share/gtk-doc/html/glib/glib-Miscellaneous-Macros.html +1 -1
- data/vendor/local/share/gtk-doc/html/glib/glib-Miscellaneous-Utility-Functions.html +4 -4
- data/vendor/local/share/gtk-doc/html/glib/glib-Singly-Linked-Lists.html +2 -2
- data/vendor/local/share/gtk-doc/html/glib/glib-Spawning-Processes.html +3 -3
- data/vendor/local/share/gtk-doc/html/glib/glib-Testing.html +4 -4
- data/vendor/local/share/gtk-doc/html/glib/glib-The-Main-Event-Loop.html +4 -4
- data/vendor/local/share/gtk-doc/html/glib/glib-Threads.html +4 -4
- data/vendor/local/share/gtk-doc/html/glib/glib-UNIX-specific-utilities-and-integration.html +1 -1
- data/vendor/local/share/gtk-doc/html/glib/glib-Version-Information.html +1 -1
- data/vendor/local/share/gtk-doc/html/glib/glib-Windows-Compatibility-Functions.html +1 -1
- data/vendor/local/share/gtk-doc/html/glib/index.html +1 -1
- data/vendor/local/share/gtk-doc/html/gobject/index.html +1 -1
- data/vendor/local/share/gtk-doc/html/libidn2/api-index-full.html +4 -10
- data/vendor/local/share/gtk-doc/html/libidn2/home.png +0 -0
- data/vendor/local/share/gtk-doc/html/libidn2/index.html +3 -3
- data/vendor/local/share/gtk-doc/html/libidn2/left-insensitive.png +0 -0
- data/vendor/local/share/gtk-doc/html/libidn2/left.png +0 -0
- data/vendor/local/share/gtk-doc/html/libidn2/libidn2-idn2.html +67 -75
- data/vendor/local/share/gtk-doc/html/libidn2/libidn2.devhelp2 +1 -0
- data/vendor/local/share/gtk-doc/html/libidn2/libidn2.html +2 -2
- data/vendor/local/share/gtk-doc/html/libidn2/right-insensitive.png +0 -0
- data/vendor/local/share/gtk-doc/html/libidn2/right.png +0 -0
- data/vendor/local/share/gtk-doc/html/libidn2/style.css +4 -0
- data/vendor/local/share/gtk-doc/html/libidn2/up-insensitive.png +0 -0
- data/vendor/local/share/gtk-doc/html/libidn2/up.png +0 -0
- data/vendor/local/share/gtk-doc/html/p11-kit/config-example.html +3 -3
- data/vendor/local/share/gtk-doc/html/p11-kit/config-files.html +3 -3
- data/vendor/local/share/gtk-doc/html/p11-kit/config.html +3 -3
- data/vendor/local/share/gtk-doc/html/p11-kit/devel-building-style.html +3 -3
- data/vendor/local/share/gtk-doc/html/p11-kit/devel-building.html +4 -4
- data/vendor/local/share/gtk-doc/html/p11-kit/devel-commands.html +3 -3
- data/vendor/local/share/gtk-doc/html/p11-kit/devel-debugging.html +3 -3
- data/vendor/local/share/gtk-doc/html/p11-kit/devel-paths.html +3 -3
- data/vendor/local/share/gtk-doc/html/p11-kit/devel-testing.html +4 -4
- data/vendor/local/share/gtk-doc/html/p11-kit/devel.html +5 -5
- data/vendor/local/share/gtk-doc/html/p11-kit/index.html +5 -4
- data/vendor/local/share/gtk-doc/html/p11-kit/p11-kit-Deprecated.html +3 -3
- data/vendor/local/share/gtk-doc/html/p11-kit/p11-kit-Future.html +292 -19
- data/vendor/local/share/gtk-doc/html/p11-kit/p11-kit-Modules.html +22 -16
- data/vendor/local/share/gtk-doc/html/p11-kit/p11-kit-PIN-Callbacks.html +19 -19
- data/vendor/local/share/gtk-doc/html/p11-kit/p11-kit-URIs.html +262 -21
- data/vendor/local/share/gtk-doc/html/p11-kit/p11-kit-Utilities.html +5 -5
- data/vendor/local/share/gtk-doc/html/p11-kit/p11-kit.devhelp2 +21 -1
- data/vendor/local/share/gtk-doc/html/p11-kit/p11-kit.html +18 -5
- data/vendor/local/share/gtk-doc/html/p11-kit/pkcs11-conf.html +6 -4
- data/vendor/local/share/gtk-doc/html/p11-kit/reference.html +43 -3
- data/vendor/local/share/gtk-doc/html/p11-kit/remoting.html +230 -0
- data/vendor/local/share/gtk-doc/html/p11-kit/sharing-managed.html +3 -3
- data/vendor/local/share/gtk-doc/html/p11-kit/sharing.html +5 -5
- data/vendor/local/share/gtk-doc/html/p11-kit/tools.html +3 -3
- data/vendor/local/share/gtk-doc/html/p11-kit/trust-disable.html +3 -3
- data/vendor/local/share/gtk-doc/html/p11-kit/trust-glib-networking.html +3 -3
- data/vendor/local/share/gtk-doc/html/p11-kit/trust-module.html +5 -5
- data/vendor/local/share/gtk-doc/html/p11-kit/trust-nss.html +3 -3
- data/vendor/local/share/gtk-doc/html/p11-kit/trust.html +42 -7
- data/vendor/local/share/info/libidn2.info +94 -54
- data/vendor/local/share/locale/cs/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/da/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/de/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/eo/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/es/LC_MESSAGES/glib20.mo +0 -0
- data/vendor/local/share/locale/es/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/fi/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/fr/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/fur/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/hr/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/hu/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/id/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/it/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/ja/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/nl/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/pl/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/pt/LC_MESSAGES/glib20.mo +0 -0
- data/vendor/local/share/locale/pt_BR/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/ro/LC_MESSAGES/glib-networking.mo +0 -0
- data/vendor/local/share/locale/ro/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/ru/LC_MESSAGES/glib-networking.mo +0 -0
- data/vendor/local/share/locale/sk/LC_MESSAGES/glib20.mo +0 -0
- data/vendor/local/share/locale/sl/LC_MESSAGES/glib-networking.mo +0 -0
- data/vendor/local/share/locale/sl/LC_MESSAGES/glib20.mo +0 -0
- data/vendor/local/share/locale/sr/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/sv/LC_MESSAGES/glib-networking.mo +0 -0
- data/vendor/local/share/locale/sv/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/uk/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/vi/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/locale/zh_CN/LC_MESSAGES/glib-networking.mo +0 -0
- data/vendor/local/share/locale/zh_CN/LC_MESSAGES/libidn2.mo +0 -0
- data/vendor/local/share/man/man1/gapplication.1 +1 -1
- data/vendor/local/share/man/man1/gdbus-codegen.1 +1 -1
- data/vendor/local/share/man/man1/gdbus.1 +1 -1
- data/vendor/local/share/man/man1/gio-querymodules.1 +1 -1
- data/vendor/local/share/man/man1/gio.1 +1 -6
- data/vendor/local/share/man/man1/glib-compile-resources.1 +1 -1
- data/vendor/local/share/man/man1/glib-compile-schemas.1 +1 -1
- data/vendor/local/share/man/man1/glib-genmarshal.1 +1 -1
- data/vendor/local/share/man/man1/glib-gettextize.1 +1 -1
- data/vendor/local/share/man/man1/glib-mkenums.1 +1 -1
- data/vendor/local/share/man/man1/gobject-query.1 +1 -1
- data/vendor/local/share/man/man1/gresource.1 +1 -1
- data/vendor/local/share/man/man1/gsettings.1 +1 -1
- data/vendor/local/share/man/man1/gtester-report.1 +1 -1
- data/vendor/local/share/man/man1/gtester.1 +1 -1
- data/vendor/local/share/man/man3/idn2_check_version.3 +1 -1
- data/vendor/local/share/man/man3/idn2_free.3 +1 -1
- data/vendor/local/share/man/man3/idn2_lookup_u8.3 +1 -1
- data/vendor/local/share/man/man3/idn2_lookup_ul.3 +1 -1
- data/vendor/local/share/man/man3/idn2_register_u8.3 +1 -1
- data/vendor/local/share/man/man3/idn2_register_ul.3 +3 -2
- data/vendor/local/share/man/man3/idn2_strerror.3 +1 -1
- data/vendor/local/share/man/man3/idn2_strerror_name.3 +1 -1
- data/vendor/local/share/man/man3/idn2_to_ascii_4i.3 +6 -3
- data/vendor/local/share/man/man3/idn2_to_ascii_4z.3 +6 -3
- data/vendor/local/share/man/man3/idn2_to_ascii_8z.3 +6 -3
- data/vendor/local/share/man/man3/idn2_to_ascii_lz.3 +6 -3
- data/vendor/local/share/man/man3/idn2_to_unicode_44i.3 +1 -1
- data/vendor/local/share/man/man3/idn2_to_unicode_4z4z.3 +1 -1
- data/vendor/local/share/man/man3/idn2_to_unicode_8z4z.3 +1 -1
- data/vendor/local/share/man/man3/idn2_to_unicode_8z8z.3 +1 -1
- data/vendor/local/share/man/man3/idn2_to_unicode_8zlz.3 +1 -1
- data/vendor/local/share/man/man3/idn2_to_unicode_lzlz.3 +1 -1
- data/vendor/local/share/p11-kit/modules/p11-kit-trust.module +3 -0
- data/version.rb +30 -0
- metadata +52 -71
- data/vendor/local/share/installed-tests/glib-networking/certificate.test +0 -3
- data/vendor/local/share/installed-tests/glib-networking/connection.test +0 -3
- data/vendor/local/share/installed-tests/glib-networking/dtls-connection.test +0 -3
- data/vendor/local/share/installed-tests/glib-networking/file-database.test +0 -3
- data/vendor/local/share/installed-tests/glib-networking/pkcs11-array.test +0 -3
- data/vendor/local/share/installed-tests/glib-networking/pkcs11-pin.test +0 -3
- data/vendor/local/share/installed-tests/glib-networking/pkcs11-slot.test +0 -3
- data/vendor/local/share/installed-tests/glib-networking/pkcs11-util.test +0 -3
@@ -3,12 +3,12 @@
|
|
3
3
|
<head>
|
4
4
|
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
5
5
|
<title>Utilities: p11-kit</title>
|
6
|
-
<meta name="generator" content="DocBook XSL Stylesheets
|
6
|
+
<meta name="generator" content="DocBook XSL Stylesheets Vsnapshot">
|
7
7
|
<link rel="home" href="index.html" title="p11-kit">
|
8
8
|
<link rel="up" href="reference.html" title="API Reference">
|
9
9
|
<link rel="prev" href="p11-kit-PIN-Callbacks.html" title="PIN Callbacks">
|
10
10
|
<link rel="next" href="p11-kit-Future.html" title="Future">
|
11
|
-
<meta name="generator" content="GTK-Doc V1.
|
11
|
+
<meta name="generator" content="GTK-Doc V1.27 (XML mode)">
|
12
12
|
<link rel="stylesheet" href="style.css" type="text/css">
|
13
13
|
</head>
|
14
14
|
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
|
@@ -133,7 +133,7 @@ The string is owned by the p11-kit library and is only valid on the same
|
|
133
133
|
thread that the failed function executed on.</p>
|
134
134
|
<div class="refsect3">
|
135
135
|
<a name="p11-kit-message.returns"></a><h4>Returns</h4>
|
136
|
-
<p> The last failure message, or <a href="
|
136
|
+
<p> The last failure message, or <a href="../liboil/liboil-liboiljunk.html#NULL:CAPS"><code class="literal">NULL</code></a>.</p>
|
137
137
|
</div>
|
138
138
|
</div>
|
139
139
|
<hr>
|
@@ -187,7 +187,7 @@ string. The result is owned by the caller.</p>
|
|
187
187
|
</div>
|
188
188
|
<div class="refsect3">
|
189
189
|
<a name="p11-kit-space-strdup.returns"></a><h4>Returns</h4>
|
190
|
-
<p> The newly allocated string, or <a href="
|
190
|
+
<p> The newly allocated string, or <a href="../liboil/liboil-liboiljunk.html#NULL:CAPS"><code class="literal">NULL</code></a> if memory could not be allocated.</p>
|
191
191
|
</div>
|
192
192
|
</div>
|
193
193
|
<hr>
|
@@ -267,6 +267,6 @@ This is the default behavior, but can be changed using <a class="link" href="p11
|
|
267
267
|
</div>
|
268
268
|
</div>
|
269
269
|
<div class="footer">
|
270
|
-
<hr>Generated by GTK-Doc V1.
|
270
|
+
<hr>Generated by GTK-Doc V1.27</div>
|
271
271
|
</body>
|
272
272
|
</html>
|
@@ -11,6 +11,7 @@
|
|
11
11
|
<sub name="Managed modules" link="sharing-managed.html"/>
|
12
12
|
</sub>
|
13
13
|
<sub name="Proxy Module" link="sharing.html"/>
|
14
|
+
<sub name="Remoting / Forwarding" link="remoting.html"/>
|
14
15
|
<sub name="Trust Policy Module" link="trust-module.html">
|
15
16
|
<sub name="Paths loaded by the Module" link="trust-module.html#trust-files"/>
|
16
17
|
<sub name="Using the Trust Policy Module with NSS" link="trust-nss.html"/>
|
@@ -83,7 +84,7 @@
|
|
83
84
|
<keyword type="function" name="p11_kit_uri_get_attribute ()" link="p11-kit-URIs.html#p11-kit-uri-get-attribute"/>
|
84
85
|
<keyword type="function" name="p11_kit_uri_set_attribute ()" link="p11-kit-URIs.html#p11-kit-uri-set-attribute"/>
|
85
86
|
<keyword type="function" name="p11_kit_uri_clear_attribute ()" link="p11-kit-URIs.html#p11-kit-uri-clear-attribute"/>
|
86
|
-
<keyword type="function" name="p11_kit_uri_set_unrecognized ()" link="p11-kit-URIs.html#p11-kit-uri-set-unrecognized"
|
87
|
+
<keyword type="function" name="p11_kit_uri_set_unrecognized ()" link="p11-kit-URIs.html#p11-kit-uri-set-unrecognized"/>
|
87
88
|
<keyword type="function" name="p11_kit_uri_any_unrecognized ()" link="p11-kit-URIs.html#p11-kit-uri-any-unrecognized"/>
|
88
89
|
<keyword type="function" name="p11_kit_uri_get_pin_value ()" link="p11-kit-URIs.html#p11-kit-uri-get-pin-value"/>
|
89
90
|
<keyword type="function" name="p11_kit_uri_set_pin_value ()" link="p11-kit-URIs.html#p11-kit-uri-set-pin-value"/>
|
@@ -91,6 +92,12 @@
|
|
91
92
|
<keyword type="function" name="p11_kit_uri_set_pin_source ()" link="p11-kit-URIs.html#p11-kit-uri-set-pin-source"/>
|
92
93
|
<keyword type="function" name="p11_kit_uri_get_pinfile ()" link="p11-kit-URIs.html#p11-kit-uri-get-pinfile" deprecated="use p11_kit_uri_get_pin_source()."/>
|
93
94
|
<keyword type="function" name="p11_kit_uri_set_pinfile ()" link="p11-kit-URIs.html#p11-kit-uri-set-pinfile" deprecated="use p11_kit_uri_set_pin_source()."/>
|
95
|
+
<keyword type="function" name="p11_kit_uri_get_module_name ()" link="p11-kit-URIs.html#p11-kit-uri-get-module-name" deprecated=""/>
|
96
|
+
<keyword type="function" name="p11_kit_uri_set_module_name ()" link="p11-kit-URIs.html#p11-kit-uri-set-module-name"/>
|
97
|
+
<keyword type="function" name="p11_kit_uri_get_module_path ()" link="p11-kit-URIs.html#p11-kit-uri-get-module-path"/>
|
98
|
+
<keyword type="function" name="p11_kit_uri_set_module_path ()" link="p11-kit-URIs.html#p11-kit-uri-set-module-path"/>
|
99
|
+
<keyword type="function" name="p11_kit_uri_get_vendor_query ()" link="p11-kit-URIs.html#p11-kit-uri-get-vendor-query"/>
|
100
|
+
<keyword type="function" name="p11_kit_uri_set_vendor_query ()" link="p11-kit-URIs.html#p11-kit-uri-set-vendor-query"/>
|
94
101
|
<keyword type="function" name="p11_kit_uri_format ()" link="p11-kit-URIs.html#p11-kit-uri-format"/>
|
95
102
|
<keyword type="function" name="p11_kit_uri_parse ()" link="p11-kit-URIs.html#p11-kit-uri-parse"/>
|
96
103
|
<keyword type="function" name="p11_kit_uri_free ()" link="p11-kit-URIs.html#p11-kit-uri-free"/>
|
@@ -134,6 +141,7 @@
|
|
134
141
|
<keyword type="function" name="p11_kit_iter_begin ()" link="p11-kit-Future.html#p11-kit-iter-begin"/>
|
135
142
|
<keyword type="function" name="p11_kit_iter_begin_with ()" link="p11-kit-Future.html#p11-kit-iter-begin-with"/>
|
136
143
|
<keyword type="function" name="p11_kit_iter_next ()" link="p11-kit-Future.html#p11-kit-iter-next"/>
|
144
|
+
<keyword type="function" name="p11_kit_iter_get_kind ()" link="p11-kit-Future.html#p11-kit-iter-get-kind"/>
|
137
145
|
<keyword type="function" name="p11_kit_iter_get_module ()" link="p11-kit-Future.html#p11-kit-iter-get-module"/>
|
138
146
|
<keyword type="function" name="p11_kit_iter_get_slot ()" link="p11-kit-Future.html#p11-kit-iter-get-slot"/>
|
139
147
|
<keyword type="function" name="p11_kit_iter_get_slot_info ()" link="p11-kit-Future.html#p11-kit-iter-get-slot-info"/>
|
@@ -146,8 +154,11 @@
|
|
146
154
|
<keyword type="function" name="p11_kit_iter_destroy_object ()" link="p11-kit-Future.html#p11-kit-iter-destroy-object"/>
|
147
155
|
<keyword type="function" name="p11_kit_iter_free ()" link="p11-kit-Future.html#p11-kit-iter-free"/>
|
148
156
|
<keyword type="function" name="p11_kit_remote_serve_module ()" link="p11-kit-Future.html#p11-kit-remote-serve-module"/>
|
157
|
+
<keyword type="function" name="p11_kit_remote_serve_token ()" link="p11-kit-Future.html#p11-kit-remote-serve-token" deprecated="use p11_kit_remote_serve_tokens()"/>
|
158
|
+
<keyword type="function" name="p11_kit_remote_serve_tokens ()" link="p11-kit-Future.html#p11-kit-remote-serve-tokens" deprecated=""/>
|
149
159
|
<keyword type="typedef" name="P11KitIter" link="p11-kit-Future.html#P11KitIter"/>
|
150
160
|
<keyword type="typedef" name="p11_kit_iter" link="p11-kit-Future.html#p11-kit-iter"/>
|
161
|
+
<keyword type="enum" name="enum P11KitIterKind" link="p11-kit-Future.html#P11KitIterKind"/>
|
151
162
|
<keyword type="enum" name="enum P11KitIterBehavior" link="p11-kit-Future.html#P11KitIterBehavior"/>
|
152
163
|
<keyword type="function" name="p11_kit_initialize_registered ()" link="p11-kit-Deprecated.html#p11-kit-initialize-registered" deprecated="Since: 0.19.0: Use p11_kit_modules_load() instead."/>
|
153
164
|
<keyword type="function" name="p11_kit_finalize_registered ()" link="p11-kit-Deprecated.html#p11-kit-finalize-registered" deprecated="Since 0.19.0: Use p11_kit_modules_release() instead."/>
|
@@ -180,7 +191,16 @@
|
|
180
191
|
<keyword type="constant" name="P11_KIT_PIN_FLAGS_RETRY" link="p11-kit-PIN-Callbacks.html#P11-KIT-PIN-FLAGS-RETRY:CAPS"/>
|
181
192
|
<keyword type="constant" name="P11_KIT_PIN_FLAGS_MANY_TRIES" link="p11-kit-PIN-Callbacks.html#P11-KIT-PIN-FLAGS-MANY-TRIES:CAPS"/>
|
182
193
|
<keyword type="constant" name="P11_KIT_PIN_FLAGS_FINAL_TRY" link="p11-kit-PIN-Callbacks.html#P11-KIT-PIN-FLAGS-FINAL-TRY:CAPS"/>
|
194
|
+
<keyword type="constant" name="P11_KIT_ITER_KIND_MODULE" link="p11-kit-Future.html#P11-KIT-ITER-KIND-MODULE:CAPS"/>
|
195
|
+
<keyword type="constant" name="P11_KIT_ITER_KIND_SLOT" link="p11-kit-Future.html#P11-KIT-ITER-KIND-SLOT:CAPS"/>
|
196
|
+
<keyword type="constant" name="P11_KIT_ITER_KIND_TOKEN" link="p11-kit-Future.html#P11-KIT-ITER-KIND-TOKEN:CAPS"/>
|
197
|
+
<keyword type="constant" name="P11_KIT_ITER_KIND_OBJECT" link="p11-kit-Future.html#P11-KIT-ITER-KIND-OBJECT:CAPS"/>
|
198
|
+
<keyword type="constant" name="P11_KIT_ITER_KIND_UNKNOWN" link="p11-kit-Future.html#P11-KIT-ITER-KIND-UNKNOWN:CAPS"/>
|
183
199
|
<keyword type="constant" name="P11_KIT_ITER_BUSY_SESSIONS" link="p11-kit-Future.html#P11-KIT-ITER-BUSY-SESSIONS:CAPS"/>
|
184
200
|
<keyword type="constant" name="P11_KIT_ITER_WANT_WRITABLE" link="p11-kit-Future.html#P11-KIT-ITER-WANT-WRITABLE:CAPS"/>
|
201
|
+
<keyword type="constant" name="P11_KIT_ITER_WITH_MODULES" link="p11-kit-Future.html#P11-KIT-ITER-WITH-MODULES:CAPS"/>
|
202
|
+
<keyword type="constant" name="P11_KIT_ITER_WITH_SLOTS" link="p11-kit-Future.html#P11-KIT-ITER-WITH-SLOTS:CAPS"/>
|
203
|
+
<keyword type="constant" name="P11_KIT_ITER_WITH_TOKENS" link="p11-kit-Future.html#P11-KIT-ITER-WITH-TOKENS:CAPS"/>
|
204
|
+
<keyword type="constant" name="P11_KIT_ITER_WITHOUT_OBJECTS" link="p11-kit-Future.html#P11-KIT-ITER-WITHOUT-OBJECTS:CAPS"/>
|
185
205
|
</functions>
|
186
206
|
</book>
|
@@ -3,12 +3,12 @@
|
|
3
3
|
<head>
|
4
4
|
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
5
5
|
<title>p11-kit: p11-kit</title>
|
6
|
-
<meta name="generator" content="DocBook XSL Stylesheets
|
6
|
+
<meta name="generator" content="DocBook XSL Stylesheets Vsnapshot">
|
7
7
|
<link rel="home" href="index.html" title="p11-kit">
|
8
8
|
<link rel="up" href="tools.html" title="Manual Pages">
|
9
9
|
<link rel="prev" href="tools.html" title="Manual Pages">
|
10
10
|
<link rel="next" href="pkcs11-conf.html" title="pkcs11.conf">
|
11
|
-
<meta name="generator" content="GTK-Doc V1.
|
11
|
+
<meta name="generator" content="GTK-Doc V1.27 (XML mode)">
|
12
12
|
<link rel="stylesheet" href="style.css" type="text/css">
|
13
13
|
</head>
|
14
14
|
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
|
@@ -33,6 +33,8 @@
|
|
33
33
|
<div class="cmdsynopsis"><p><code class="command">p11-kit list-modules</code> </p></div>
|
34
34
|
<div class="cmdsynopsis"><p><code class="command">p11-kit extract</code> ...
|
35
35
|
</p></div>
|
36
|
+
<div class="cmdsynopsis"><p><code class="command">p11-kit server</code> ...
|
37
|
+
</p></div>
|
36
38
|
</div>
|
37
39
|
<div class="refsect1">
|
38
40
|
<a name="p11-kit-description"></a><h2>Description</h2>
|
@@ -77,6 +79,15 @@ $ p11-kit list-modules
|
|
77
79
|
for more information</p>
|
78
80
|
</div>
|
79
81
|
<div class="refsect1">
|
82
|
+
<a name="p11-kit-server"></a><h2>Server</h2>
|
83
|
+
<p>Run a server process that exposes PKCS#11 module remotely.</p>
|
84
|
+
<pre class="programlisting">
|
85
|
+
$ p11-kit server pkcs11:token1 pkcs11:token2 ...
|
86
|
+
$ p11-kit server --provider /path/to/pkcs11-module.so pkcs11:token1 pkcs11:token2 ...
|
87
|
+
</pre>
|
88
|
+
<p>This launches a server that exposes the given PKCS#11 tokens on a local socket. The tokens must belong to the same module. To access the socket, use <code class="literal">p11-kit-client.so</code> module. The server address and PID are printed as a shell-script snippet which sets the appropriate environment variable: <code class="literal">P11_KIT_SERVER_ADDRESS</code> and <code class="literal">P11_KIT_SERVER_PID</code>.</p>
|
89
|
+
</div>
|
90
|
+
<div class="refsect1">
|
80
91
|
<a name="p11-kit-extract-trust"></a><h2>Extract Trust</h2>
|
81
92
|
<p>Extract standard trust information files.</p>
|
82
93
|
<p>This operation has been moved to a separate command <span class="command"><strong>trust extract-compat</strong></span>.
|
@@ -88,29 +99,31 @@ $ p11-kit list-modules
|
|
88
99
|
<p>Run a PKCS#11 module remotely.</p>
|
89
100
|
<pre class="programlisting">
|
90
101
|
$ p11-kit remote /path/to/pkcs11-module.so
|
102
|
+
$ p11-kit remote pkcs11:token1 pkcs11:token2 ...
|
91
103
|
</pre>
|
92
104
|
<p>This is not meant to be run directly from a terminal. But rather in a
|
93
105
|
<code class="option">remote</code> option in a
|
94
106
|
<span class="citerefentry"><span class="refentrytitle">pkcs11.conf</span>(5)</span>
|
95
107
|
file.</p>
|
108
|
+
<p>This exposes the given PKCS#11 module or tokens over standard input and output. Those two forms, whether to expose a module or tokens, are mutually exclusive and if the second form is used, the tokens must belong to the same module.</p>
|
96
109
|
</div>
|
97
110
|
<div class="refsect1">
|
98
111
|
<a name="p11-kit-bugs"></a><h2>Bugs</h2>
|
99
112
|
<p>
|
100
113
|
Please send bug reports to either the distribution bug tracker
|
101
114
|
or the upstream bug tracker at
|
102
|
-
<a class="ulink" href="https://
|
115
|
+
<a class="ulink" href="https://github.com/p11-glue/p11-kit/issues/" target="_top">https://github.com/p11-glue/p11-kit/issues/</a>.
|
103
116
|
</p>
|
104
117
|
</div>
|
105
118
|
<div class="refsect1">
|
106
119
|
<a name="p11-kit-see-also"></a><h2>See also</h2>
|
107
120
|
<span class="simplelist"><span class="citerefentry"><span class="refentrytitle">pkcs11.conf</span>(5)</span></span><p>
|
108
121
|
Further details available in the p11-kit online documentation at
|
109
|
-
<a class="ulink" href="
|
122
|
+
<a class="ulink" href="https://p11-glue.github.io/p11-glue/p11-kit/manual/" target="_top">https://p11-glue.github.io/p11-glue/p11-kit/manual/</a>.
|
110
123
|
</p>
|
111
124
|
</div>
|
112
125
|
</div>
|
113
126
|
<div class="footer">
|
114
|
-
<hr>Generated by GTK-Doc V1.
|
127
|
+
<hr>Generated by GTK-Doc V1.27</div>
|
115
128
|
</body>
|
116
129
|
</html>
|
@@ -3,12 +3,12 @@
|
|
3
3
|
<head>
|
4
4
|
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
5
5
|
<title>pkcs11.conf: p11-kit</title>
|
6
|
-
<meta name="generator" content="DocBook XSL Stylesheets
|
6
|
+
<meta name="generator" content="DocBook XSL Stylesheets Vsnapshot">
|
7
7
|
<link rel="home" href="index.html" title="p11-kit">
|
8
8
|
<link rel="up" href="tools.html" title="Manual Pages">
|
9
9
|
<link rel="prev" href="p11-kit.html" title="p11-kit">
|
10
10
|
<link rel="next" href="trust.html" title="trust">
|
11
|
-
<meta name="generator" content="GTK-Doc V1.
|
11
|
+
<meta name="generator" content="GTK-Doc V1.27 (XML mode)">
|
12
12
|
<link rel="stylesheet" href="style.css" type="text/css">
|
13
13
|
</head>
|
14
14
|
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
|
@@ -106,6 +106,7 @@ x-custom : text
|
|
106
106
|
for other programs using p11-kit. The base name of the process executable
|
107
107
|
should be used here, for example
|
108
108
|
<code class="literal">seahorse, ssh</code>.</p>
|
109
|
+
<p>This option can also be used to control whether the module will be loaded by <a class="link" href="sharing.html" title="Sharing PKCS#11 modules">the proxy module</a>. To enable loading only from the proxy module, specify <code class="literal">p11-kit-proxy</code> as the value.</p>
|
109
110
|
<p>This is not a security feature. The argument is optional. If
|
110
111
|
not present, then any process will load the module.</p>
|
111
112
|
</td>
|
@@ -118,6 +119,7 @@ x-custom : text
|
|
118
119
|
other programs using p11-kit. The base name of the process
|
119
120
|
executable should be used here, for example
|
120
121
|
<code class="literal">firefox, thunderbird-bin</code>.</p>
|
122
|
+
<p>This option can also be used to control whether the module will be loaded by <a class="link" href="sharing.html" title="Sharing PKCS#11 modules">the proxy module</a>. To disable loading from the proxy module, specify <code class="literal">p11-kit-proxy</code> as the value.</p>
|
121
123
|
<p>This is not a security feature. The argument is optional. If
|
122
124
|
not present, then any process will load the module.</p>
|
123
125
|
</td>
|
@@ -250,11 +252,11 @@ remote: |ssh user@remote p11-kit remote /path/to/module.so
|
|
250
252
|
<div class="refsect1">
|
251
253
|
<a name="pkcs11-conf-see-also"></a><h2>See also</h2>
|
252
254
|
<span class="simplelist"><span class="citerefentry"><span class="refentrytitle">p11-kit</span>(8)</span></span><p>Further details available in the p11-kit online documentation at
|
253
|
-
<a class="ulink" href="
|
255
|
+
<a class="ulink" href="https://p11-glue.github.io/p11-glue/p11-kit/manual/" target="_top">https://p11-glue.github.io/p11-glue/p11-kit/manual/</a>.
|
254
256
|
</p>
|
255
257
|
</div>
|
256
258
|
</div>
|
257
259
|
<div class="footer">
|
258
|
-
<hr>Generated by GTK-Doc V1.
|
260
|
+
<hr>Generated by GTK-Doc V1.27</div>
|
259
261
|
</body>
|
260
262
|
</html>
|
@@ -3,12 +3,12 @@
|
|
3
3
|
<head>
|
4
4
|
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
5
5
|
<title>API Reference: p11-kit</title>
|
6
|
-
<meta name="generator" content="DocBook XSL Stylesheets
|
6
|
+
<meta name="generator" content="DocBook XSL Stylesheets Vsnapshot">
|
7
7
|
<link rel="home" href="index.html" title="p11-kit">
|
8
8
|
<link rel="up" href="index.html" title="p11-kit">
|
9
9
|
<link rel="prev" href="trust.html" title="trust">
|
10
10
|
<link rel="next" href="p11-kit-Modules.html" title="Modules">
|
11
|
-
<meta name="generator" content="GTK-Doc V1.
|
11
|
+
<meta name="generator" content="GTK-Doc V1.27 (XML mode)">
|
12
12
|
<link rel="stylesheet" href="style.css" type="text/css">
|
13
13
|
</head>
|
14
14
|
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
|
@@ -57,6 +57,10 @@
|
|
57
57
|
</dt>
|
58
58
|
<dd></dd>
|
59
59
|
<dt>
|
60
|
+
<a class="link" href="p11-kit-Future.html#P11KitIterKind" title="enum P11KitIterKind">P11KitIterKind</a>, enum in <a class="link" href="p11-kit-Future.html" title="Future">Future</a>
|
61
|
+
</dt>
|
62
|
+
<dd></dd>
|
63
|
+
<dt>
|
60
64
|
<a class="link" href="p11-kit-PIN-Callbacks.html#P11KitPin" title="P11KitPin">P11KitPin</a>, typedef in <a class="link" href="p11-kit-PIN-Callbacks.html" title="PIN Callbacks">PIN Callbacks</a>
|
61
65
|
</dt>
|
62
66
|
<dd></dd>
|
@@ -149,6 +153,10 @@
|
|
149
153
|
</dt>
|
150
154
|
<dd></dd>
|
151
155
|
<dt>
|
156
|
+
<a class="link" href="p11-kit-Future.html#p11-kit-iter-get-kind" title="p11_kit_iter_get_kind ()">p11_kit_iter_get_kind</a>, function in <a class="link" href="p11-kit-Future.html" title="Future">Future</a>
|
157
|
+
</dt>
|
158
|
+
<dd></dd>
|
159
|
+
<dt>
|
152
160
|
<a class="link" href="p11-kit-Future.html#p11-kit-iter-get-module" title="p11_kit_iter_get_module ()">p11_kit_iter_get_module</a>, function in <a class="link" href="p11-kit-Future.html" title="Future">Future</a>
|
153
161
|
</dt>
|
154
162
|
<dd></dd>
|
@@ -341,6 +349,14 @@
|
|
341
349
|
</dt>
|
342
350
|
<dd></dd>
|
343
351
|
<dt>
|
352
|
+
<a class="link" href="p11-kit-Future.html#p11-kit-remote-serve-token" title="p11_kit_remote_serve_token ()">p11_kit_remote_serve_token</a>, function in <a class="link" href="p11-kit-Future.html" title="Future">Future</a>
|
353
|
+
</dt>
|
354
|
+
<dd></dd>
|
355
|
+
<dt>
|
356
|
+
<a class="link" href="p11-kit-Future.html#p11-kit-remote-serve-tokens" title="p11_kit_remote_serve_tokens ()">p11_kit_remote_serve_tokens</a>, function in <a class="link" href="p11-kit-Future.html" title="Future">Future</a>
|
357
|
+
</dt>
|
358
|
+
<dd></dd>
|
359
|
+
<dt>
|
344
360
|
<a class="link" href="p11-kit-Future.html#p11-kit-set-progname" title="p11_kit_set_progname ()">p11_kit_set_progname</a>, function in <a class="link" href="p11-kit-Future.html" title="Future">Future</a>
|
345
361
|
</dt>
|
346
362
|
<dd></dd>
|
@@ -393,6 +409,14 @@
|
|
393
409
|
</dt>
|
394
410
|
<dd></dd>
|
395
411
|
<dt>
|
412
|
+
<a class="link" href="p11-kit-URIs.html#p11-kit-uri-get-module-name" title="p11_kit_uri_get_module_name ()">p11_kit_uri_get_module_name</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
|
413
|
+
</dt>
|
414
|
+
<dd></dd>
|
415
|
+
<dt>
|
416
|
+
<a class="link" href="p11-kit-URIs.html#p11-kit-uri-get-module-path" title="p11_kit_uri_get_module_path ()">p11_kit_uri_get_module_path</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
|
417
|
+
</dt>
|
418
|
+
<dd></dd>
|
419
|
+
<dt>
|
396
420
|
<a class="link" href="p11-kit-URIs.html#p11-kit-uri-get-pinfile" title="p11_kit_uri_get_pinfile ()">p11_kit_uri_get_pinfile</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
|
397
421
|
</dt>
|
398
422
|
<dd></dd>
|
@@ -417,6 +441,10 @@
|
|
417
441
|
</dt>
|
418
442
|
<dd></dd>
|
419
443
|
<dt>
|
444
|
+
<a class="link" href="p11-kit-URIs.html#p11-kit-uri-get-vendor-query" title="p11_kit_uri_get_vendor_query ()">p11_kit_uri_get_vendor_query</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
|
445
|
+
</dt>
|
446
|
+
<dd></dd>
|
447
|
+
<dt>
|
420
448
|
<a class="link" href="p11-kit-URIs.html#p11-kit-uri-match-attributes" title="p11_kit_uri_match_attributes ()">p11_kit_uri_match_attributes</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
|
421
449
|
</dt>
|
422
450
|
<dd></dd>
|
@@ -465,6 +493,14 @@
|
|
465
493
|
</dt>
|
466
494
|
<dd></dd>
|
467
495
|
<dt>
|
496
|
+
<a class="link" href="p11-kit-URIs.html#p11-kit-uri-set-module-name" title="p11_kit_uri_set_module_name ()">p11_kit_uri_set_module_name</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
|
497
|
+
</dt>
|
498
|
+
<dd></dd>
|
499
|
+
<dt>
|
500
|
+
<a class="link" href="p11-kit-URIs.html#p11-kit-uri-set-module-path" title="p11_kit_uri_set_module_path ()">p11_kit_uri_set_module_path</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
|
501
|
+
</dt>
|
502
|
+
<dd></dd>
|
503
|
+
<dt>
|
468
504
|
<a class="link" href="p11-kit-URIs.html#p11-kit-uri-set-pinfile" title="p11_kit_uri_set_pinfile ()">p11_kit_uri_set_pinfile</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
|
469
505
|
</dt>
|
470
506
|
<dd></dd>
|
@@ -484,6 +520,10 @@
|
|
484
520
|
<a class="link" href="p11-kit-URIs.html#p11-kit-uri-set-unrecognized" title="p11_kit_uri_set_unrecognized ()">p11_kit_uri_set_unrecognized</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
|
485
521
|
</dt>
|
486
522
|
<dd></dd>
|
523
|
+
<dt>
|
524
|
+
<a class="link" href="p11-kit-URIs.html#p11-kit-uri-set-vendor-query" title="p11_kit_uri_set_vendor_query ()">p11_kit_uri_set_vendor_query</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
|
525
|
+
</dt>
|
526
|
+
<dd></dd>
|
487
527
|
</div>
|
488
528
|
<div class="glossary">
|
489
529
|
<div class="titlepage"><div><div><h2 class="title">
|
@@ -512,6 +552,6 @@
|
|
512
552
|
</div>
|
513
553
|
</div>
|
514
554
|
<div class="footer">
|
515
|
-
<hr>Generated by GTK-Doc V1.
|
555
|
+
<hr>Generated by GTK-Doc V1.27</div>
|
516
556
|
</body>
|
517
557
|
</html>
|
@@ -0,0 +1,230 @@
|
|
1
|
+
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
2
|
+
<html>
|
3
|
+
<head>
|
4
|
+
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
5
|
+
<title>Remoting / Forwarding: p11-kit</title>
|
6
|
+
<meta name="generator" content="DocBook XSL Stylesheets Vsnapshot">
|
7
|
+
<link rel="home" href="index.html" title="p11-kit">
|
8
|
+
<link rel="up" href="index.html" title="p11-kit">
|
9
|
+
<link rel="prev" href="sharing.html" title="Proxy Module">
|
10
|
+
<link rel="next" href="trust-module.html" title="Trust Policy Module">
|
11
|
+
<meta name="generator" content="GTK-Doc V1.27 (XML mode)">
|
12
|
+
<link rel="stylesheet" href="style.css" type="text/css">
|
13
|
+
</head>
|
14
|
+
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
|
15
|
+
<table class="navigation" id="top" width="100%" summary="Navigation header" cellpadding="2" cellspacing="5"><tr valign="middle">
|
16
|
+
<td width="100%" align="left" class="shortcuts"></td>
|
17
|
+
<td><a accesskey="h" href="index.html"><img src="home.png" width="16" height="16" border="0" alt="Home"></a></td>
|
18
|
+
<td><img src="up-insensitive.png" width="16" height="16" border="0"></td>
|
19
|
+
<td><a accesskey="p" href="sharing.html"><img src="left.png" width="16" height="16" border="0" alt="Prev"></a></td>
|
20
|
+
<td><a accesskey="n" href="trust-module.html"><img src="right.png" width="16" height="16" border="0" alt="Next"></a></td>
|
21
|
+
</tr></table>
|
22
|
+
<div class="chapter">
|
23
|
+
<div class="titlepage"><div><div><h1 class="title">
|
24
|
+
<a name="remoting"></a>Remoting / Forwarding</h1></div></div></div>
|
25
|
+
<p>Smartcards or hardware security modules (HSM) are technologies to
|
26
|
+
keep private keys on devices physically isolated to a device only available
|
27
|
+
to the user. That way only the intended user can use that device to authenticate,
|
28
|
+
authorize or perform other functions that involve the private keys. These come
|
29
|
+
usually in the form of a USB device or token which is plugged into the local computer.
|
30
|
+
</p>
|
31
|
+
<p>In modern "cloud" computing, it is often desirable to virtually transfer such
|
32
|
+
a device on remote servers. For example, one can sign software or documents on a remote
|
33
|
+
server, use the local smart card to authorize itself to Kerberos, or any other
|
34
|
+
possible use. There are various approaches to tackle that problem, and on different
|
35
|
+
levels of the smart card application stack. It is possible to forward the USB
|
36
|
+
device holding the smart card, or forward the lower-level PC/SC protocol which
|
37
|
+
some smart cards talk, or forward the high-level interface used to communicate
|
38
|
+
with smart cards, the PKCS#11 interface.</p>
|
39
|
+
<p>To address that problem, in p11-kit, we allow the forwarding of
|
40
|
+
the higher level smart card interface, PKCS#11. In the following paragraphs
|
41
|
+
we describe the approach and tools needed to perform that forwarding over SSH
|
42
|
+
secure communication channels.</p>
|
43
|
+
<div class="refsect1">
|
44
|
+
<a name="remoting-scenario"></a><h2>Scenario</h2>
|
45
|
+
<p>We assume having a local workstation, and a remote server. On the local
|
46
|
+
computer we have inserted a smart card, in our examples we use a Nitrokey
|
47
|
+
card with the OpenSC drivers. We will forward the card
|
48
|
+
from the workstation to the remote server.</p>
|
49
|
+
</div>
|
50
|
+
<div class="refsect1">
|
51
|
+
<a name="remoting-setup"></a><h2>Setting up the PKCS#11 forwarding server on a local client</h2>
|
52
|
+
<p>To forward a smartcard to a remote server, we first need to identify which
|
53
|
+
smartcards are available. To list the smartcards currently attached to the local
|
54
|
+
computer, use the p11tool command from the gnutls package. For example:
|
55
|
+
</p>
|
56
|
+
<pre class="programlisting">
|
57
|
+
$ p11tool --list-tokens
|
58
|
+
...
|
59
|
+
Token 6:
|
60
|
+
URL: pkcs11:model=PKCS%2315%20emulated;manufacturer=www.CardContact.de;serial=DENK0000000;token=UserPIN%20%28Daiki%27s%20token%29
|
61
|
+
Label: UserPIN (Daiki's token)
|
62
|
+
Type: Hardware token
|
63
|
+
Manufacturer: www.CardContact.de
|
64
|
+
Model: PKCS#15 emulated
|
65
|
+
Serial: DENK0000000
|
66
|
+
Module: opensc-pkcs11.so
|
67
|
+
...
|
68
|
+
</pre>
|
69
|
+
<p>This is the entry for the card we'd like to forward to remote system. The important
|
70
|
+
pieces are the 'pkcs11:' URL listed above, and the module name. Once we determine which
|
71
|
+
smartcard to forward, we expose it to a local Unix domain socket, with the following
|
72
|
+
p11-kit server command.
|
73
|
+
</p>
|
74
|
+
<pre class="programlisting">
|
75
|
+
$ p11-kit server --provider /usr/lib64/pkcs11/opensc-pkcs11.so "pkcs11:model=PKCS%2315%20emulated;manufacturer=www.CardContact.de;serial=DENK0000000;token=UserPIN%20%28Daiki%27s%20token%29"
|
76
|
+
</pre>
|
77
|
+
<p>Here we provide to the server the module location (optional) with the --provider
|
78
|
+
option, as well as the URL of the card. We copied the values from the Module and URL
|
79
|
+
lines of the p11tool output above. When the p11-kit server command starts, it will
|
80
|
+
print the address of the PKCS#11 unix domain socket and the process ID of the server.
|
81
|
+
</p>
|
82
|
+
<pre class="programlisting">
|
83
|
+
P11_KIT_SERVER_ADDRESS=unix:path=/run/user/12345/p11-kit/pkcs11-12345
|
84
|
+
P11_KIT_SERVER_PID=12345
|
85
|
+
</pre>
|
86
|
+
<p>For later use, set the variables output by the tool on your shell prompt
|
87
|
+
(e.g., copy and paste them or call the above p11-kit server command line with
|
88
|
+
<code class="literal">eval $(p11-kit server ...)</code>).
|
89
|
+
</p>
|
90
|
+
</div>
|
91
|
+
<div class="refsect1">
|
92
|
+
<a name="remoting-forwarding-socket"></a><h2>Forwarding and using the PKCS#11 Unix socket on the remote server</h2>
|
93
|
+
<p>On the remote server, we will initially forward the previously generated PKCS#11
|
94
|
+
unix socket, and then access the smart card through it. To access the forwarded socket
|
95
|
+
as if it were a smart card, a dedicated PKCS#11 module p11-kit-client.so is provided as
|
96
|
+
part of the p11-kit-server package.
|
97
|
+
</p>
|
98
|
+
</div>
|
99
|
+
<div class="refsect1">
|
100
|
+
<a name="remoting-forwarding-socket-prep"></a><h2>Preparing the remote system for PKCS#11 socket forwarding</h2>
|
101
|
+
<p>One important detail you should be aware of, is the file system location of the
|
102
|
+
forwarded socket. By convention, the p11-kit-client.so module utilizes the "user runtime
|
103
|
+
directory", managed by systemd; the directory is created when a user logs in, and removed
|
104
|
+
upon logout, so that the user doesn't need to manually clean up the socket file.
|
105
|
+
</p>
|
106
|
+
<p>To locate your user runtime directory, do:
|
107
|
+
</p>
|
108
|
+
<pre class="programlisting">
|
109
|
+
$ systemd-path user-runtime
|
110
|
+
/run/user/1000
|
111
|
+
</pre>
|
112
|
+
<p>The <code class="literal">p11-kit-client.so</code> module looks for the socket file under a
|
113
|
+
subdirectory (<code class="literal">/run/user/1000/p11-kit</code> in this example). To enable
|
114
|
+
auto-creation of the directory, do the following.
|
115
|
+
</p>
|
116
|
+
<pre class="programlisting">
|
117
|
+
$ systemctl --user enable p11-kit-client.service
|
118
|
+
</pre>
|
119
|
+
</div>
|
120
|
+
<div class="refsect1">
|
121
|
+
<a name="remoting-finally-forwarding"></a><h2>Forwarding the PKCS#11 socket</h2>
|
122
|
+
<p>We will use ssh to forward the local PKCS#11 unix socket to the remote server.
|
123
|
+
Following the p11-kit-client convention, we will forward the socket to the remote user
|
124
|
+
run-time path so that cleaning up on disconnect is not required. The remote location
|
125
|
+
of the run-time path can be obtained as follows.
|
126
|
+
</p>
|
127
|
+
<pre class="programlisting">
|
128
|
+
$ ssh [user]@[remotehost] systemd-path user-runtime
|
129
|
+
/run/user/1000
|
130
|
+
</pre>
|
131
|
+
<p>The number at the end of the path above is your user ID in that system
|
132
|
+
(and thus will vary from user to user). You can now forward the Unix domain socket
|
133
|
+
with the -R option of the ssh command, after replacing the example path with the
|
134
|
+
actual run-time path.
|
135
|
+
</p>
|
136
|
+
<pre class="programlisting">
|
137
|
+
$ ssh -R /run/user/[userID]/p11-kit/pkcs11:${P11_KIT_SERVER_ADDRESS#*=} [user]@[remotehost]
|
138
|
+
</pre>
|
139
|
+
<p>After successfully logging in to the remote host, you can use the forwarded
|
140
|
+
smartcard as if it were directly connected to the server using the
|
141
|
+
<code class="literal">p11-kit-client.so</code>. Note that if any error occurs during the forwarding
|
142
|
+
setup, you will see something like this on your terminal:
|
143
|
+
</p>
|
144
|
+
<pre class="programlisting">
|
145
|
+
Warning: remote port forwarding failed for listen path /run/user/...
|
146
|
+
</pre>
|
147
|
+
</div>
|
148
|
+
<div class="refsect1">
|
149
|
+
<a name="remoting-using"></a><h2>Using the forwarded PKCS#11 socket</h2>
|
150
|
+
<p>Let's first make sure the smart card works on the remote system, by listing it:
|
151
|
+
</p>
|
152
|
+
<pre class="programlisting">
|
153
|
+
$ ls -l /run/user/1000/p11-kit/pkcs11
|
154
|
+
|
155
|
+
$ p11tool --provider /usr/lib64/pkcs11/p11-kit-client.so --list-tokens
|
156
|
+
...
|
157
|
+
Token 0:
|
158
|
+
URL: pkcs11:model=PKCS%2315%20emulated;manufacturer=www.CardContact.de;serial=DENK0000000;token=UserPIN%20%28Daiki%27s%20token%29
|
159
|
+
Label: UserPIN (Daiki's token)
|
160
|
+
Type: Hardware token
|
161
|
+
Manufacturer: www.CardContact.de
|
162
|
+
Model: PKCS#15 emulated
|
163
|
+
Serial: DENK0000000
|
164
|
+
Module: (null)
|
165
|
+
...
|
166
|
+
</pre>
|
167
|
+
<p>We can similarly generate, copy objects or test certificates to the card using
|
168
|
+
the same command. Any applications which support PKCS#11 can perform cryptographic
|
169
|
+
operations through the client module.
|
170
|
+
</p>
|
171
|
+
</div>
|
172
|
+
<div class="refsect1">
|
173
|
+
<a name="remoting-registering"></a><h2>Registering the client module for use with OpenSSL and GnuTLS apps</h2>
|
174
|
+
<p>To utilize the p11-kit-client module with OpenSSL (via engine_pkcs11 provided
|
175
|
+
by the libp11 package) and GnuTLS applications, you have to register it in
|
176
|
+
p11-kit. To do it for the current user, use the following commands:
|
177
|
+
</p>
|
178
|
+
<pre class="programlisting">
|
179
|
+
$ mkdir .config/pkcs11/modules/
|
180
|
+
$ echo "module: /usr/lib64/pkcs11/p11-kit-client.so" >.config/pkcs11/modules/p11-kit-client.module
|
181
|
+
</pre>
|
182
|
+
<p>Once this is done both OpenSSL and GnuTLS applications should work, for example:
|
183
|
+
</p>
|
184
|
+
<pre class="programlisting">
|
185
|
+
$ URL="pkcs11:model=PKCS%2315%20emulated;manufacturer=www.CardContact.de;serial=DENK0000000;token=UserPIN%20%28Daiki%27s%20token%29"
|
186
|
+
|
187
|
+
# Generate a key using gnutls’ p11tool
|
188
|
+
$ p11tool --generate-ecc --login --label test-key "$URL"
|
189
|
+
|
190
|
+
# generate a certificate request with the previous key using openssl
|
191
|
+
$ openssl req -engine pkcs11 -new -key "$URL;;object=test-key;type=private;pin-value=XXXX" \
|
192
|
+
-keyform engine -out req.pem -text -subj "/CN=Test user"
|
193
|
+
</pre>
|
194
|
+
<p>Note that the token URL remains the same in the forwarded system as in the original one.
|
195
|
+
</p>
|
196
|
+
</div>
|
197
|
+
<div class="refsect1">
|
198
|
+
<a name="remoting-ssh"></a><h2>Using the client module with OpenSSH</h2>
|
199
|
+
<p>To re-use the already forwarded smartcard for authentication with another remote host, you can run ssh and provide the -I option with p11-kit-client.so. For example:
|
200
|
+
</p>
|
201
|
+
<pre class="programlisting">
|
202
|
+
$ ssh -I /usr/lib64/pkcs11/p11-kit-client.so [user]@[anotherhost]
|
203
|
+
</pre>
|
204
|
+
</div>
|
205
|
+
<div class="refsect1">
|
206
|
+
<a name="remoting-nss"></a><h2>Using the client module with NSS applications</h2>
|
207
|
+
<p>To register the forwarded smartcard in NSS applications, you can set it up with
|
208
|
+
the modutil command, as follows.
|
209
|
+
</p>
|
210
|
+
<pre class="programlisting">
|
211
|
+
$ sudo modutil -dbdir /etc/pki/nssdb -add p11-kit-client -libfile /usr/lib64/pkcs11/p11-kit-client.so
|
212
|
+
|
213
|
+
$ modutil -dbdir /etc/pki/nssdb -list
|
214
|
+
...
|
215
|
+
3. p11-kit-client
|
216
|
+
library name: /usr/lib64/pkcs11/p11-kit-client.so
|
217
|
+
uri: pkcs11:library-manufacturer=OpenSC%20Project;library-description=OpenSC%20smartcard%20framework;library-version=0.17
|
218
|
+
slots: 1 slot attached
|
219
|
+
status: loaded
|
220
|
+
|
221
|
+
slot: Nitrokey Nitrokey HSM (010000000000000000000000) 00 00
|
222
|
+
token: UserPIN (Daiki's token)
|
223
|
+
uri: pkcs11:token=UserPIN%20(Daiki's%20token);manufacturer=www.CardContact.de;serial=DENK0000000;model=PKCS%2315%20emulated
|
224
|
+
</pre>
|
225
|
+
</div>
|
226
|
+
</div>
|
227
|
+
<div class="footer">
|
228
|
+
<hr>Generated by GTK-Doc V1.27</div>
|
229
|
+
</body>
|
230
|
+
</html>
|