glib2 3.2.5-x86-mingw32 → 3.2.6-x86-mingw32

Sign up to get free protection for your applications and to get access to all the features.
Files changed (325) hide show
  1. checksums.yaml +4 -4
  2. data/COPYING.LIB +502 -0
  3. data/README.md +42 -0
  4. data/Rakefile +8 -7
  5. data/ext/glib2/glib2.def +5 -0
  6. data/ext/glib2/rbglib-gc.c +89 -0
  7. data/ext/glib2/rbglib-variant-type.c +17 -0
  8. data/ext/glib2/rbglib.c +3 -0
  9. data/ext/glib2/rbglib.h +6 -1
  10. data/ext/glib2/rbglib2conversions.h +1 -1
  11. data/ext/glib2/rbgobj_boxed.c +49 -30
  12. data/ext/glib2/rbgobj_closure.c +3 -2
  13. data/ext/glib2/rbgobj_convert.c +1 -2
  14. data/ext/glib2/rbgobj_enums.c +32 -14
  15. data/ext/glib2/rbgobj_flags.c +31 -14
  16. data/ext/glib2/rbgobj_param.c +43 -23
  17. data/ext/glib2/rbgobj_signal.c +78 -66
  18. data/ext/glib2/rbgobj_type.c +22 -10
  19. data/ext/glib2/rbgobject.h +2 -0
  20. data/ext/glib2/rbgprivate.h +11 -0
  21. data/glib2.gemspec +48 -0
  22. data/lib/2.2/glib2.so +0 -0
  23. data/lib/2.3/glib2.so +0 -0
  24. data/lib/2.4/glib2.so +0 -0
  25. data/lib/2.5/glib2.so +0 -0
  26. data/lib/gnome2/rake/package-task.rb +17 -5
  27. data/lib/gnome2/rake/package.rb +2 -2
  28. data/lib/gnome2/rake/windows-binary-build-task.rb +39 -6
  29. data/lib/mkmf-gnome2.rb +4 -3
  30. data/sample/bookmarkfile.rb +2 -2
  31. data/sample/type-register.rb +6 -6
  32. data/sample/type-register2.rb +6 -6
  33. data/test/{test_enum.rb → test-enum.rb} +0 -0
  34. data/test/{test_file_utils.rb → test-file-utils.rb} +0 -0
  35. data/test/{test_flags.rb → test-flags.rb} +0 -0
  36. data/test/{test_glib2.rb → test-glib2.rb} +0 -0
  37. data/test/{test_key_file.rb → test-key-file.rb} +0 -0
  38. data/test/{test_mkenums.rb → test-mkenums.rb} +0 -0
  39. data/test/{test_poll_fd.rb → test-poll-fd.rb} +0 -0
  40. data/test/{test_signal.rb → test-signal.rb} +34 -2
  41. data/test/{test_source.rb → test-source.rb} +0 -0
  42. data/test/{test_spawn.rb → test-spawn.rb} +0 -0
  43. data/test/{test_timeout.rb → test-timeout.rb} +0 -0
  44. data/test/{test_unicode.rb → test-unicode.rb} +0 -0
  45. data/test/{test_utils.rb → test-utils.rb} +0 -0
  46. data/test/{test_value.rb → test-value.rb} +0 -0
  47. data/test/test-variant.rb +27 -0
  48. data/test/{test_win32.rb → test-win32.rb} +0 -0
  49. data/vendor/local/bin/asn1Coding.exe +0 -0
  50. data/vendor/local/bin/asn1Decoding.exe +0 -0
  51. data/vendor/local/bin/asn1Parser.exe +0 -0
  52. data/vendor/local/bin/envsubst.exe +0 -0
  53. data/vendor/local/bin/gdbus.exe +0 -0
  54. data/vendor/local/bin/gettext.exe +0 -0
  55. data/vendor/local/bin/gio-querymodules.exe +0 -0
  56. data/vendor/local/bin/gio.exe +0 -0
  57. data/vendor/local/bin/glib-compile-resources.exe +0 -0
  58. data/vendor/local/bin/glib-compile-schemas.exe +0 -0
  59. data/vendor/local/bin/glib-genmarshal +1 -1
  60. data/vendor/local/bin/glib-gettextize +1 -1
  61. data/vendor/local/bin/glib-mkenums +4 -2
  62. data/vendor/local/bin/gobject-query.exe +0 -0
  63. data/vendor/local/bin/gresource.exe +0 -0
  64. data/vendor/local/bin/gsettings.exe +0 -0
  65. data/vendor/local/bin/gspawn-win32-helper-console.exe +0 -0
  66. data/vendor/local/bin/gspawn-win32-helper.exe +0 -0
  67. data/vendor/local/bin/iconv.exe +0 -0
  68. data/vendor/local/bin/idn2.exe +0 -0
  69. data/vendor/local/bin/libasprintf-0.dll +0 -0
  70. data/vendor/local/bin/libcharset-1.dll +0 -0
  71. data/vendor/local/bin/libffi-6.dll +0 -0
  72. data/vendor/local/bin/libgio-2.0-0.dll +0 -0
  73. data/vendor/local/bin/libglib-2.0-0.dll +0 -0
  74. data/vendor/local/bin/libgmodule-2.0-0.dll +0 -0
  75. data/vendor/local/bin/libgmp-10.dll +0 -0
  76. data/vendor/local/bin/libgnutls-30.dll +0 -0
  77. data/vendor/local/bin/libgobject-2.0-0.dll +0 -0
  78. data/vendor/local/bin/libgthread-2.0-0.dll +0 -0
  79. data/vendor/local/bin/libhogweed-4-2.dll +0 -0
  80. data/vendor/local/bin/libiconv-2.dll +0 -0
  81. data/vendor/local/bin/libidn2-0.dll +0 -0
  82. data/vendor/local/bin/libintl-8.dll +0 -0
  83. data/vendor/local/bin/libnettle-6-2.dll +0 -0
  84. data/vendor/local/bin/libp11-kit-0.dll +0 -0
  85. data/vendor/local/bin/libpcre-1.dll +0 -0
  86. data/vendor/local/bin/libpcrecpp-0.dll +0 -0
  87. data/vendor/local/bin/libpcreposix-0.dll +0 -0
  88. data/vendor/local/bin/libtasn1-6.dll +0 -0
  89. data/vendor/local/bin/nettle-hash.exe +0 -0
  90. data/vendor/local/bin/nettle-lfib-stream.exe +0 -0
  91. data/vendor/local/bin/nettle-pbkdf2.exe +0 -0
  92. data/vendor/local/bin/ngettext.exe +0 -0
  93. data/vendor/local/bin/p11-kit.exe +0 -0
  94. data/vendor/local/bin/pcregrep.exe +0 -0
  95. data/vendor/local/bin/pcretest.exe +0 -0
  96. data/vendor/local/bin/pkcs1-conv.exe +0 -0
  97. data/vendor/local/bin/sexp-conv.exe +0 -0
  98. data/vendor/local/bin/trust.exe +0 -0
  99. data/vendor/local/include/idn2.h +5 -3
  100. data/vendor/local/include/p11-kit-1/p11-kit/iter.h +25 -1
  101. data/vendor/local/include/p11-kit-1/p11-kit/p11-kit.h +6 -0
  102. data/vendor/local/include/p11-kit-1/p11-kit/pkcs11.h +133 -4
  103. data/vendor/local/include/p11-kit-1/p11-kit/pkcs11x.h +1 -0
  104. data/vendor/local/include/p11-kit-1/p11-kit/remote.h +15 -0
  105. data/vendor/local/include/p11-kit-1/p11-kit/uri.h +32 -12
  106. data/vendor/local/lib/gio/modules/libgiognutls.dll +0 -0
  107. data/vendor/local/lib/glib-2.0/include/glibconfig.h +1 -1
  108. data/vendor/local/lib/libasprintf.a +0 -0
  109. data/vendor/local/lib/libasprintf.dll.a +0 -0
  110. data/vendor/local/lib/libasprintf.la +1 -1
  111. data/vendor/local/lib/libcharset.a +0 -0
  112. data/vendor/local/lib/libcharset.dll.a +0 -0
  113. data/vendor/local/lib/libcharset.la +1 -1
  114. data/vendor/local/lib/libffi.dll.a +0 -0
  115. data/vendor/local/lib/libffi.la +1 -1
  116. data/vendor/local/lib/libgio-2.0.dll.a +0 -0
  117. data/vendor/local/lib/libgio-2.0.la +2 -2
  118. data/vendor/local/lib/libglib-2.0.dll.a +0 -0
  119. data/vendor/local/lib/libglib-2.0.la +2 -2
  120. data/vendor/local/lib/libgmodule-2.0.dll.a +0 -0
  121. data/vendor/local/lib/libgmodule-2.0.la +2 -2
  122. data/vendor/local/lib/libgmp.dll.a +0 -0
  123. data/vendor/local/lib/libgnutls.dll.a +0 -0
  124. data/vendor/local/lib/libgnutls.la +1 -1
  125. data/vendor/local/lib/libgobject-2.0.dll.a +0 -0
  126. data/vendor/local/lib/libgobject-2.0.la +2 -2
  127. data/vendor/local/lib/libgthread-2.0.dll.a +0 -0
  128. data/vendor/local/lib/libgthread-2.0.la +2 -2
  129. data/vendor/local/lib/libhogweed.dll.a +0 -0
  130. data/vendor/local/lib/libiconv.dll.a +0 -0
  131. data/vendor/local/lib/libiconv.la +1 -1
  132. data/vendor/local/lib/libidn2.a +0 -0
  133. data/vendor/local/lib/libidn2.dll.a +0 -0
  134. data/vendor/local/lib/libidn2.la +2 -2
  135. data/vendor/local/lib/libintl.a +0 -0
  136. data/vendor/local/lib/libintl.dll.a +0 -0
  137. data/vendor/local/lib/libintl.la +1 -1
  138. data/vendor/local/lib/libnettle.dll.a +0 -0
  139. data/vendor/local/lib/libp11-kit.dll.a +0 -0
  140. data/vendor/local/lib/libp11-kit.la +3 -3
  141. data/vendor/local/lib/libpcre.a +0 -0
  142. data/vendor/local/lib/libpcre.dll.a +0 -0
  143. data/vendor/local/lib/libpcre.la +1 -1
  144. data/vendor/local/lib/libpcrecpp.dll.a +0 -0
  145. data/vendor/local/lib/libpcrecpp.la +1 -1
  146. data/vendor/local/lib/libpcreposix.a +0 -0
  147. data/vendor/local/lib/libpcreposix.dll.a +0 -0
  148. data/vendor/local/lib/libpcreposix.la +1 -1
  149. data/vendor/local/lib/libtasn1.dll.a +0 -0
  150. data/vendor/local/lib/pkcs11/p11-kit-trust.dll +0 -0
  151. data/vendor/local/lib/pkcs11/p11-kit-trust.dll.a +0 -0
  152. data/vendor/local/lib/pkcs11/p11-kit-trust.la +3 -3
  153. data/vendor/local/lib/pkgconfig/gio-2.0.pc +1 -1
  154. data/vendor/local/lib/pkgconfig/gio-windows-2.0.pc +1 -1
  155. data/vendor/local/lib/pkgconfig/glib-2.0.pc +1 -1
  156. data/vendor/local/lib/pkgconfig/gmodule-2.0.pc +1 -1
  157. data/vendor/local/lib/pkgconfig/gmodule-export-2.0.pc +1 -1
  158. data/vendor/local/lib/pkgconfig/gmodule-no-export-2.0.pc +1 -1
  159. data/vendor/local/lib/pkgconfig/gobject-2.0.pc +1 -1
  160. data/vendor/local/lib/pkgconfig/gthread-2.0.pc +1 -1
  161. data/vendor/local/lib/pkgconfig/libidn2.pc +1 -1
  162. data/vendor/local/lib/pkgconfig/p11-kit-1.pc +1 -1
  163. data/vendor/local/libexec/p11-kit/p11-kit-remote.exe +0 -0
  164. data/vendor/local/libexec/p11-kit/p11-kit-server.exe +0 -0
  165. data/vendor/local/share/gdb/auto-load/home/vagrant/ruby-gnome2/glib2/vendor/local/lib/{libglib-2.0.so.0.5600.0-gdb.py → libglib-2.0.so.0.5600.1-gdb.py} +0 -0
  166. data/vendor/local/share/gdb/auto-load/home/vagrant/ruby-gnome2/glib2/vendor/local/lib/{libgobject-2.0.so.0.5600.0-gdb.py → libgobject-2.0.so.0.5600.1-gdb.py} +0 -0
  167. data/vendor/local/share/glib-2.0/codegen/__init__.pyc +0 -0
  168. data/vendor/local/share/glib-2.0/codegen/__init__.pyo +0 -0
  169. data/vendor/local/share/glib-2.0/codegen/codegen.pyc +0 -0
  170. data/vendor/local/share/glib-2.0/codegen/codegen.pyo +0 -0
  171. data/vendor/local/share/glib-2.0/codegen/codegen_docbook.pyc +0 -0
  172. data/vendor/local/share/glib-2.0/codegen/codegen_docbook.pyo +0 -0
  173. data/vendor/local/share/glib-2.0/codegen/codegen_main.pyc +0 -0
  174. data/vendor/local/share/glib-2.0/codegen/codegen_main.pyo +0 -0
  175. data/vendor/local/share/glib-2.0/codegen/config.py +1 -1
  176. data/vendor/local/share/glib-2.0/codegen/config.pyc +0 -0
  177. data/vendor/local/share/glib-2.0/codegen/config.pyo +0 -0
  178. data/vendor/local/share/glib-2.0/codegen/dbustypes.pyc +0 -0
  179. data/vendor/local/share/glib-2.0/codegen/dbustypes.pyo +0 -0
  180. data/vendor/local/share/glib-2.0/codegen/parser.pyc +0 -0
  181. data/vendor/local/share/glib-2.0/codegen/parser.pyo +0 -0
  182. data/vendor/local/share/glib-2.0/codegen/utils.pyc +0 -0
  183. data/vendor/local/share/glib-2.0/codegen/utils.pyo +0 -0
  184. data/vendor/local/share/glib-2.0/gdb/gobject_gdb.py +1 -1
  185. data/vendor/local/share/gtk-doc/html/gio/GApplication.html +35 -13
  186. data/vendor/local/share/gtk-doc/html/gio/gio.html +0 -4
  187. data/vendor/local/share/gtk-doc/html/gio/index.html +1 -1
  188. data/vendor/local/share/gtk-doc/html/glib/glib-Commandline-option-parser.html +2 -2
  189. data/vendor/local/share/gtk-doc/html/glib/glib-Doubly-Linked-Lists.html +2 -2
  190. data/vendor/local/share/gtk-doc/html/glib/glib-Error-Reporting.html +1 -1
  191. data/vendor/local/share/gtk-doc/html/glib/glib-File-Utilities.html +1 -1
  192. data/vendor/local/share/gtk-doc/html/glib/glib-GVariant.html +2 -2
  193. data/vendor/local/share/gtk-doc/html/glib/glib-Keyed-Data-Lists.html +3 -3
  194. data/vendor/local/share/gtk-doc/html/glib/glib-Memory-Allocation.html +3 -3
  195. data/vendor/local/share/gtk-doc/html/glib/glib-Miscellaneous-Macros.html +1 -1
  196. data/vendor/local/share/gtk-doc/html/glib/glib-Miscellaneous-Utility-Functions.html +4 -4
  197. data/vendor/local/share/gtk-doc/html/glib/glib-Singly-Linked-Lists.html +2 -2
  198. data/vendor/local/share/gtk-doc/html/glib/glib-Spawning-Processes.html +3 -3
  199. data/vendor/local/share/gtk-doc/html/glib/glib-Testing.html +4 -4
  200. data/vendor/local/share/gtk-doc/html/glib/glib-The-Main-Event-Loop.html +4 -4
  201. data/vendor/local/share/gtk-doc/html/glib/glib-Threads.html +4 -4
  202. data/vendor/local/share/gtk-doc/html/glib/glib-UNIX-specific-utilities-and-integration.html +1 -1
  203. data/vendor/local/share/gtk-doc/html/glib/glib-Version-Information.html +1 -1
  204. data/vendor/local/share/gtk-doc/html/glib/glib-Windows-Compatibility-Functions.html +1 -1
  205. data/vendor/local/share/gtk-doc/html/glib/index.html +1 -1
  206. data/vendor/local/share/gtk-doc/html/gobject/index.html +1 -1
  207. data/vendor/local/share/gtk-doc/html/libidn2/api-index-full.html +4 -10
  208. data/vendor/local/share/gtk-doc/html/libidn2/home.png +0 -0
  209. data/vendor/local/share/gtk-doc/html/libidn2/index.html +3 -3
  210. data/vendor/local/share/gtk-doc/html/libidn2/left-insensitive.png +0 -0
  211. data/vendor/local/share/gtk-doc/html/libidn2/left.png +0 -0
  212. data/vendor/local/share/gtk-doc/html/libidn2/libidn2-idn2.html +67 -75
  213. data/vendor/local/share/gtk-doc/html/libidn2/libidn2.devhelp2 +1 -0
  214. data/vendor/local/share/gtk-doc/html/libidn2/libidn2.html +2 -2
  215. data/vendor/local/share/gtk-doc/html/libidn2/right-insensitive.png +0 -0
  216. data/vendor/local/share/gtk-doc/html/libidn2/right.png +0 -0
  217. data/vendor/local/share/gtk-doc/html/libidn2/style.css +4 -0
  218. data/vendor/local/share/gtk-doc/html/libidn2/up-insensitive.png +0 -0
  219. data/vendor/local/share/gtk-doc/html/libidn2/up.png +0 -0
  220. data/vendor/local/share/gtk-doc/html/p11-kit/config-example.html +3 -3
  221. data/vendor/local/share/gtk-doc/html/p11-kit/config-files.html +3 -3
  222. data/vendor/local/share/gtk-doc/html/p11-kit/config.html +3 -3
  223. data/vendor/local/share/gtk-doc/html/p11-kit/devel-building-style.html +3 -3
  224. data/vendor/local/share/gtk-doc/html/p11-kit/devel-building.html +4 -4
  225. data/vendor/local/share/gtk-doc/html/p11-kit/devel-commands.html +3 -3
  226. data/vendor/local/share/gtk-doc/html/p11-kit/devel-debugging.html +3 -3
  227. data/vendor/local/share/gtk-doc/html/p11-kit/devel-paths.html +3 -3
  228. data/vendor/local/share/gtk-doc/html/p11-kit/devel-testing.html +4 -4
  229. data/vendor/local/share/gtk-doc/html/p11-kit/devel.html +5 -5
  230. data/vendor/local/share/gtk-doc/html/p11-kit/index.html +5 -4
  231. data/vendor/local/share/gtk-doc/html/p11-kit/p11-kit-Deprecated.html +3 -3
  232. data/vendor/local/share/gtk-doc/html/p11-kit/p11-kit-Future.html +292 -19
  233. data/vendor/local/share/gtk-doc/html/p11-kit/p11-kit-Modules.html +22 -16
  234. data/vendor/local/share/gtk-doc/html/p11-kit/p11-kit-PIN-Callbacks.html +19 -19
  235. data/vendor/local/share/gtk-doc/html/p11-kit/p11-kit-URIs.html +262 -21
  236. data/vendor/local/share/gtk-doc/html/p11-kit/p11-kit-Utilities.html +5 -5
  237. data/vendor/local/share/gtk-doc/html/p11-kit/p11-kit.devhelp2 +21 -1
  238. data/vendor/local/share/gtk-doc/html/p11-kit/p11-kit.html +18 -5
  239. data/vendor/local/share/gtk-doc/html/p11-kit/pkcs11-conf.html +6 -4
  240. data/vendor/local/share/gtk-doc/html/p11-kit/reference.html +43 -3
  241. data/vendor/local/share/gtk-doc/html/p11-kit/remoting.html +230 -0
  242. data/vendor/local/share/gtk-doc/html/p11-kit/sharing-managed.html +3 -3
  243. data/vendor/local/share/gtk-doc/html/p11-kit/sharing.html +5 -5
  244. data/vendor/local/share/gtk-doc/html/p11-kit/tools.html +3 -3
  245. data/vendor/local/share/gtk-doc/html/p11-kit/trust-disable.html +3 -3
  246. data/vendor/local/share/gtk-doc/html/p11-kit/trust-glib-networking.html +3 -3
  247. data/vendor/local/share/gtk-doc/html/p11-kit/trust-module.html +5 -5
  248. data/vendor/local/share/gtk-doc/html/p11-kit/trust-nss.html +3 -3
  249. data/vendor/local/share/gtk-doc/html/p11-kit/trust.html +42 -7
  250. data/vendor/local/share/info/libidn2.info +94 -54
  251. data/vendor/local/share/locale/cs/LC_MESSAGES/libidn2.mo +0 -0
  252. data/vendor/local/share/locale/da/LC_MESSAGES/libidn2.mo +0 -0
  253. data/vendor/local/share/locale/de/LC_MESSAGES/libidn2.mo +0 -0
  254. data/vendor/local/share/locale/eo/LC_MESSAGES/libidn2.mo +0 -0
  255. data/vendor/local/share/locale/es/LC_MESSAGES/glib20.mo +0 -0
  256. data/vendor/local/share/locale/es/LC_MESSAGES/libidn2.mo +0 -0
  257. data/vendor/local/share/locale/fi/LC_MESSAGES/libidn2.mo +0 -0
  258. data/vendor/local/share/locale/fr/LC_MESSAGES/libidn2.mo +0 -0
  259. data/vendor/local/share/locale/fur/LC_MESSAGES/libidn2.mo +0 -0
  260. data/vendor/local/share/locale/hr/LC_MESSAGES/libidn2.mo +0 -0
  261. data/vendor/local/share/locale/hu/LC_MESSAGES/libidn2.mo +0 -0
  262. data/vendor/local/share/locale/id/LC_MESSAGES/libidn2.mo +0 -0
  263. data/vendor/local/share/locale/it/LC_MESSAGES/libidn2.mo +0 -0
  264. data/vendor/local/share/locale/ja/LC_MESSAGES/libidn2.mo +0 -0
  265. data/vendor/local/share/locale/nl/LC_MESSAGES/libidn2.mo +0 -0
  266. data/vendor/local/share/locale/pl/LC_MESSAGES/libidn2.mo +0 -0
  267. data/vendor/local/share/locale/pt/LC_MESSAGES/glib20.mo +0 -0
  268. data/vendor/local/share/locale/pt_BR/LC_MESSAGES/libidn2.mo +0 -0
  269. data/vendor/local/share/locale/ro/LC_MESSAGES/glib-networking.mo +0 -0
  270. data/vendor/local/share/locale/ro/LC_MESSAGES/libidn2.mo +0 -0
  271. data/vendor/local/share/locale/ru/LC_MESSAGES/glib-networking.mo +0 -0
  272. data/vendor/local/share/locale/sk/LC_MESSAGES/glib20.mo +0 -0
  273. data/vendor/local/share/locale/sl/LC_MESSAGES/glib-networking.mo +0 -0
  274. data/vendor/local/share/locale/sl/LC_MESSAGES/glib20.mo +0 -0
  275. data/vendor/local/share/locale/sr/LC_MESSAGES/libidn2.mo +0 -0
  276. data/vendor/local/share/locale/sv/LC_MESSAGES/glib-networking.mo +0 -0
  277. data/vendor/local/share/locale/sv/LC_MESSAGES/libidn2.mo +0 -0
  278. data/vendor/local/share/locale/uk/LC_MESSAGES/libidn2.mo +0 -0
  279. data/vendor/local/share/locale/vi/LC_MESSAGES/libidn2.mo +0 -0
  280. data/vendor/local/share/locale/zh_CN/LC_MESSAGES/glib-networking.mo +0 -0
  281. data/vendor/local/share/locale/zh_CN/LC_MESSAGES/libidn2.mo +0 -0
  282. data/vendor/local/share/man/man1/gapplication.1 +1 -1
  283. data/vendor/local/share/man/man1/gdbus-codegen.1 +1 -1
  284. data/vendor/local/share/man/man1/gdbus.1 +1 -1
  285. data/vendor/local/share/man/man1/gio-querymodules.1 +1 -1
  286. data/vendor/local/share/man/man1/gio.1 +1 -6
  287. data/vendor/local/share/man/man1/glib-compile-resources.1 +1 -1
  288. data/vendor/local/share/man/man1/glib-compile-schemas.1 +1 -1
  289. data/vendor/local/share/man/man1/glib-genmarshal.1 +1 -1
  290. data/vendor/local/share/man/man1/glib-gettextize.1 +1 -1
  291. data/vendor/local/share/man/man1/glib-mkenums.1 +1 -1
  292. data/vendor/local/share/man/man1/gobject-query.1 +1 -1
  293. data/vendor/local/share/man/man1/gresource.1 +1 -1
  294. data/vendor/local/share/man/man1/gsettings.1 +1 -1
  295. data/vendor/local/share/man/man1/gtester-report.1 +1 -1
  296. data/vendor/local/share/man/man1/gtester.1 +1 -1
  297. data/vendor/local/share/man/man3/idn2_check_version.3 +1 -1
  298. data/vendor/local/share/man/man3/idn2_free.3 +1 -1
  299. data/vendor/local/share/man/man3/idn2_lookup_u8.3 +1 -1
  300. data/vendor/local/share/man/man3/idn2_lookup_ul.3 +1 -1
  301. data/vendor/local/share/man/man3/idn2_register_u8.3 +1 -1
  302. data/vendor/local/share/man/man3/idn2_register_ul.3 +3 -2
  303. data/vendor/local/share/man/man3/idn2_strerror.3 +1 -1
  304. data/vendor/local/share/man/man3/idn2_strerror_name.3 +1 -1
  305. data/vendor/local/share/man/man3/idn2_to_ascii_4i.3 +6 -3
  306. data/vendor/local/share/man/man3/idn2_to_ascii_4z.3 +6 -3
  307. data/vendor/local/share/man/man3/idn2_to_ascii_8z.3 +6 -3
  308. data/vendor/local/share/man/man3/idn2_to_ascii_lz.3 +6 -3
  309. data/vendor/local/share/man/man3/idn2_to_unicode_44i.3 +1 -1
  310. data/vendor/local/share/man/man3/idn2_to_unicode_4z4z.3 +1 -1
  311. data/vendor/local/share/man/man3/idn2_to_unicode_8z4z.3 +1 -1
  312. data/vendor/local/share/man/man3/idn2_to_unicode_8z8z.3 +1 -1
  313. data/vendor/local/share/man/man3/idn2_to_unicode_8zlz.3 +1 -1
  314. data/vendor/local/share/man/man3/idn2_to_unicode_lzlz.3 +1 -1
  315. data/vendor/local/share/p11-kit/modules/p11-kit-trust.module +3 -0
  316. data/version.rb +30 -0
  317. metadata +52 -71
  318. data/vendor/local/share/installed-tests/glib-networking/certificate.test +0 -3
  319. data/vendor/local/share/installed-tests/glib-networking/connection.test +0 -3
  320. data/vendor/local/share/installed-tests/glib-networking/dtls-connection.test +0 -3
  321. data/vendor/local/share/installed-tests/glib-networking/file-database.test +0 -3
  322. data/vendor/local/share/installed-tests/glib-networking/pkcs11-array.test +0 -3
  323. data/vendor/local/share/installed-tests/glib-networking/pkcs11-pin.test +0 -3
  324. data/vendor/local/share/installed-tests/glib-networking/pkcs11-slot.test +0 -3
  325. data/vendor/local/share/installed-tests/glib-networking/pkcs11-util.test +0 -3
@@ -3,12 +3,12 @@
3
3
  <head>
4
4
  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
5
5
  <title>Utilities: p11-kit</title>
6
- <meta name="generator" content="DocBook XSL Stylesheets V1.79.1">
6
+ <meta name="generator" content="DocBook XSL Stylesheets Vsnapshot">
7
7
  <link rel="home" href="index.html" title="p11-kit">
8
8
  <link rel="up" href="reference.html" title="API Reference">
9
9
  <link rel="prev" href="p11-kit-PIN-Callbacks.html" title="PIN Callbacks">
10
10
  <link rel="next" href="p11-kit-Future.html" title="Future">
11
- <meta name="generator" content="GTK-Doc V1.25 (XML mode)">
11
+ <meta name="generator" content="GTK-Doc V1.27 (XML mode)">
12
12
  <link rel="stylesheet" href="style.css" type="text/css">
13
13
  </head>
14
14
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
@@ -133,7 +133,7 @@ The string is owned by the p11-kit library and is only valid on the same
133
133
  thread that the failed function executed on.</p>
134
134
  <div class="refsect3">
135
135
  <a name="p11-kit-message.returns"></a><h4>Returns</h4>
136
- <p> The last failure message, or <a href="/usr/share/gtk-doc/html/liboil/liboil-liboiljunk.html#NULL:CAPS"><code class="literal">NULL</code></a>.</p>
136
+ <p> The last failure message, or <a href="../liboil/liboil-liboiljunk.html#NULL:CAPS"><code class="literal">NULL</code></a>.</p>
137
137
  </div>
138
138
  </div>
139
139
  <hr>
@@ -187,7 +187,7 @@ string. The result is owned by the caller.</p>
187
187
  </div>
188
188
  <div class="refsect3">
189
189
  <a name="p11-kit-space-strdup.returns"></a><h4>Returns</h4>
190
- <p> The newly allocated string, or <a href="/usr/share/gtk-doc/html/liboil/liboil-liboiljunk.html#NULL:CAPS"><code class="literal">NULL</code></a> if memory could not be allocated.</p>
190
+ <p> The newly allocated string, or <a href="../liboil/liboil-liboiljunk.html#NULL:CAPS"><code class="literal">NULL</code></a> if memory could not be allocated.</p>
191
191
  </div>
192
192
  </div>
193
193
  <hr>
@@ -267,6 +267,6 @@ This is the default behavior, but can be changed using <a class="link" href="p11
267
267
  </div>
268
268
  </div>
269
269
  <div class="footer">
270
- <hr>Generated by GTK-Doc V1.25</div>
270
+ <hr>Generated by GTK-Doc V1.27</div>
271
271
  </body>
272
272
  </html>
@@ -11,6 +11,7 @@
11
11
  <sub name="Managed modules" link="sharing-managed.html"/>
12
12
  </sub>
13
13
  <sub name="Proxy Module" link="sharing.html"/>
14
+ <sub name="Remoting / Forwarding" link="remoting.html"/>
14
15
  <sub name="Trust Policy Module" link="trust-module.html">
15
16
  <sub name="Paths loaded by the Module" link="trust-module.html#trust-files"/>
16
17
  <sub name="Using the Trust Policy Module with NSS" link="trust-nss.html"/>
@@ -83,7 +84,7 @@
83
84
  <keyword type="function" name="p11_kit_uri_get_attribute ()" link="p11-kit-URIs.html#p11-kit-uri-get-attribute"/>
84
85
  <keyword type="function" name="p11_kit_uri_set_attribute ()" link="p11-kit-URIs.html#p11-kit-uri-set-attribute"/>
85
86
  <keyword type="function" name="p11_kit_uri_clear_attribute ()" link="p11-kit-URIs.html#p11-kit-uri-clear-attribute"/>
86
- <keyword type="function" name="p11_kit_uri_set_unrecognized ()" link="p11-kit-URIs.html#p11-kit-uri-set-unrecognized" deprecated=""/>
87
+ <keyword type="function" name="p11_kit_uri_set_unrecognized ()" link="p11-kit-URIs.html#p11-kit-uri-set-unrecognized"/>
87
88
  <keyword type="function" name="p11_kit_uri_any_unrecognized ()" link="p11-kit-URIs.html#p11-kit-uri-any-unrecognized"/>
88
89
  <keyword type="function" name="p11_kit_uri_get_pin_value ()" link="p11-kit-URIs.html#p11-kit-uri-get-pin-value"/>
89
90
  <keyword type="function" name="p11_kit_uri_set_pin_value ()" link="p11-kit-URIs.html#p11-kit-uri-set-pin-value"/>
@@ -91,6 +92,12 @@
91
92
  <keyword type="function" name="p11_kit_uri_set_pin_source ()" link="p11-kit-URIs.html#p11-kit-uri-set-pin-source"/>
92
93
  <keyword type="function" name="p11_kit_uri_get_pinfile ()" link="p11-kit-URIs.html#p11-kit-uri-get-pinfile" deprecated="use p11_kit_uri_get_pin_source()."/>
93
94
  <keyword type="function" name="p11_kit_uri_set_pinfile ()" link="p11-kit-URIs.html#p11-kit-uri-set-pinfile" deprecated="use p11_kit_uri_set_pin_source()."/>
95
+ <keyword type="function" name="p11_kit_uri_get_module_name ()" link="p11-kit-URIs.html#p11-kit-uri-get-module-name" deprecated=""/>
96
+ <keyword type="function" name="p11_kit_uri_set_module_name ()" link="p11-kit-URIs.html#p11-kit-uri-set-module-name"/>
97
+ <keyword type="function" name="p11_kit_uri_get_module_path ()" link="p11-kit-URIs.html#p11-kit-uri-get-module-path"/>
98
+ <keyword type="function" name="p11_kit_uri_set_module_path ()" link="p11-kit-URIs.html#p11-kit-uri-set-module-path"/>
99
+ <keyword type="function" name="p11_kit_uri_get_vendor_query ()" link="p11-kit-URIs.html#p11-kit-uri-get-vendor-query"/>
100
+ <keyword type="function" name="p11_kit_uri_set_vendor_query ()" link="p11-kit-URIs.html#p11-kit-uri-set-vendor-query"/>
94
101
  <keyword type="function" name="p11_kit_uri_format ()" link="p11-kit-URIs.html#p11-kit-uri-format"/>
95
102
  <keyword type="function" name="p11_kit_uri_parse ()" link="p11-kit-URIs.html#p11-kit-uri-parse"/>
96
103
  <keyword type="function" name="p11_kit_uri_free ()" link="p11-kit-URIs.html#p11-kit-uri-free"/>
@@ -134,6 +141,7 @@
134
141
  <keyword type="function" name="p11_kit_iter_begin ()" link="p11-kit-Future.html#p11-kit-iter-begin"/>
135
142
  <keyword type="function" name="p11_kit_iter_begin_with ()" link="p11-kit-Future.html#p11-kit-iter-begin-with"/>
136
143
  <keyword type="function" name="p11_kit_iter_next ()" link="p11-kit-Future.html#p11-kit-iter-next"/>
144
+ <keyword type="function" name="p11_kit_iter_get_kind ()" link="p11-kit-Future.html#p11-kit-iter-get-kind"/>
137
145
  <keyword type="function" name="p11_kit_iter_get_module ()" link="p11-kit-Future.html#p11-kit-iter-get-module"/>
138
146
  <keyword type="function" name="p11_kit_iter_get_slot ()" link="p11-kit-Future.html#p11-kit-iter-get-slot"/>
139
147
  <keyword type="function" name="p11_kit_iter_get_slot_info ()" link="p11-kit-Future.html#p11-kit-iter-get-slot-info"/>
@@ -146,8 +154,11 @@
146
154
  <keyword type="function" name="p11_kit_iter_destroy_object ()" link="p11-kit-Future.html#p11-kit-iter-destroy-object"/>
147
155
  <keyword type="function" name="p11_kit_iter_free ()" link="p11-kit-Future.html#p11-kit-iter-free"/>
148
156
  <keyword type="function" name="p11_kit_remote_serve_module ()" link="p11-kit-Future.html#p11-kit-remote-serve-module"/>
157
+ <keyword type="function" name="p11_kit_remote_serve_token ()" link="p11-kit-Future.html#p11-kit-remote-serve-token" deprecated="use p11_kit_remote_serve_tokens()"/>
158
+ <keyword type="function" name="p11_kit_remote_serve_tokens ()" link="p11-kit-Future.html#p11-kit-remote-serve-tokens" deprecated=""/>
149
159
  <keyword type="typedef" name="P11KitIter" link="p11-kit-Future.html#P11KitIter"/>
150
160
  <keyword type="typedef" name="p11_kit_iter" link="p11-kit-Future.html#p11-kit-iter"/>
161
+ <keyword type="enum" name="enum P11KitIterKind" link="p11-kit-Future.html#P11KitIterKind"/>
151
162
  <keyword type="enum" name="enum P11KitIterBehavior" link="p11-kit-Future.html#P11KitIterBehavior"/>
152
163
  <keyword type="function" name="p11_kit_initialize_registered ()" link="p11-kit-Deprecated.html#p11-kit-initialize-registered" deprecated="Since: 0.19.0: Use p11_kit_modules_load() instead."/>
153
164
  <keyword type="function" name="p11_kit_finalize_registered ()" link="p11-kit-Deprecated.html#p11-kit-finalize-registered" deprecated="Since 0.19.0: Use p11_kit_modules_release() instead."/>
@@ -180,7 +191,16 @@
180
191
  <keyword type="constant" name="P11_KIT_PIN_FLAGS_RETRY" link="p11-kit-PIN-Callbacks.html#P11-KIT-PIN-FLAGS-RETRY:CAPS"/>
181
192
  <keyword type="constant" name="P11_KIT_PIN_FLAGS_MANY_TRIES" link="p11-kit-PIN-Callbacks.html#P11-KIT-PIN-FLAGS-MANY-TRIES:CAPS"/>
182
193
  <keyword type="constant" name="P11_KIT_PIN_FLAGS_FINAL_TRY" link="p11-kit-PIN-Callbacks.html#P11-KIT-PIN-FLAGS-FINAL-TRY:CAPS"/>
194
+ <keyword type="constant" name="P11_KIT_ITER_KIND_MODULE" link="p11-kit-Future.html#P11-KIT-ITER-KIND-MODULE:CAPS"/>
195
+ <keyword type="constant" name="P11_KIT_ITER_KIND_SLOT" link="p11-kit-Future.html#P11-KIT-ITER-KIND-SLOT:CAPS"/>
196
+ <keyword type="constant" name="P11_KIT_ITER_KIND_TOKEN" link="p11-kit-Future.html#P11-KIT-ITER-KIND-TOKEN:CAPS"/>
197
+ <keyword type="constant" name="P11_KIT_ITER_KIND_OBJECT" link="p11-kit-Future.html#P11-KIT-ITER-KIND-OBJECT:CAPS"/>
198
+ <keyword type="constant" name="P11_KIT_ITER_KIND_UNKNOWN" link="p11-kit-Future.html#P11-KIT-ITER-KIND-UNKNOWN:CAPS"/>
183
199
  <keyword type="constant" name="P11_KIT_ITER_BUSY_SESSIONS" link="p11-kit-Future.html#P11-KIT-ITER-BUSY-SESSIONS:CAPS"/>
184
200
  <keyword type="constant" name="P11_KIT_ITER_WANT_WRITABLE" link="p11-kit-Future.html#P11-KIT-ITER-WANT-WRITABLE:CAPS"/>
201
+ <keyword type="constant" name="P11_KIT_ITER_WITH_MODULES" link="p11-kit-Future.html#P11-KIT-ITER-WITH-MODULES:CAPS"/>
202
+ <keyword type="constant" name="P11_KIT_ITER_WITH_SLOTS" link="p11-kit-Future.html#P11-KIT-ITER-WITH-SLOTS:CAPS"/>
203
+ <keyword type="constant" name="P11_KIT_ITER_WITH_TOKENS" link="p11-kit-Future.html#P11-KIT-ITER-WITH-TOKENS:CAPS"/>
204
+ <keyword type="constant" name="P11_KIT_ITER_WITHOUT_OBJECTS" link="p11-kit-Future.html#P11-KIT-ITER-WITHOUT-OBJECTS:CAPS"/>
185
205
  </functions>
186
206
  </book>
@@ -3,12 +3,12 @@
3
3
  <head>
4
4
  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
5
5
  <title>p11-kit: p11-kit</title>
6
- <meta name="generator" content="DocBook XSL Stylesheets V1.79.1">
6
+ <meta name="generator" content="DocBook XSL Stylesheets Vsnapshot">
7
7
  <link rel="home" href="index.html" title="p11-kit">
8
8
  <link rel="up" href="tools.html" title="Manual Pages">
9
9
  <link rel="prev" href="tools.html" title="Manual Pages">
10
10
  <link rel="next" href="pkcs11-conf.html" title="pkcs11.conf">
11
- <meta name="generator" content="GTK-Doc V1.25 (XML mode)">
11
+ <meta name="generator" content="GTK-Doc V1.27 (XML mode)">
12
12
  <link rel="stylesheet" href="style.css" type="text/css">
13
13
  </head>
14
14
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
@@ -33,6 +33,8 @@
33
33
  <div class="cmdsynopsis"><p><code class="command">p11-kit list-modules</code> </p></div>
34
34
  <div class="cmdsynopsis"><p><code class="command">p11-kit extract</code> ...
35
35
  </p></div>
36
+ <div class="cmdsynopsis"><p><code class="command">p11-kit server</code> ...
37
+ </p></div>
36
38
  </div>
37
39
  <div class="refsect1">
38
40
  <a name="p11-kit-description"></a><h2>Description</h2>
@@ -77,6 +79,15 @@ $ p11-kit list-modules
77
79
  for more information</p>
78
80
  </div>
79
81
  <div class="refsect1">
82
+ <a name="p11-kit-server"></a><h2>Server</h2>
83
+ <p>Run a server process that exposes PKCS#11 module remotely.</p>
84
+ <pre class="programlisting">
85
+ $ p11-kit server pkcs11:token1 pkcs11:token2 ...
86
+ $ p11-kit server --provider /path/to/pkcs11-module.so pkcs11:token1 pkcs11:token2 ...
87
+ </pre>
88
+ <p>This launches a server that exposes the given PKCS#11 tokens on a local socket. The tokens must belong to the same module. To access the socket, use <code class="literal">p11-kit-client.so</code> module. The server address and PID are printed as a shell-script snippet which sets the appropriate environment variable: <code class="literal">P11_KIT_SERVER_ADDRESS</code> and <code class="literal">P11_KIT_SERVER_PID</code>.</p>
89
+ </div>
90
+ <div class="refsect1">
80
91
  <a name="p11-kit-extract-trust"></a><h2>Extract Trust</h2>
81
92
  <p>Extract standard trust information files.</p>
82
93
  <p>This operation has been moved to a separate command <span class="command"><strong>trust extract-compat</strong></span>.
@@ -88,29 +99,31 @@ $ p11-kit list-modules
88
99
  <p>Run a PKCS#11 module remotely.</p>
89
100
  <pre class="programlisting">
90
101
  $ p11-kit remote /path/to/pkcs11-module.so
102
+ $ p11-kit remote pkcs11:token1 pkcs11:token2 ...
91
103
  </pre>
92
104
  <p>This is not meant to be run directly from a terminal. But rather in a
93
105
  <code class="option">remote</code> option in a
94
106
  <span class="citerefentry"><span class="refentrytitle">pkcs11.conf</span>(5)</span>
95
107
  file.</p>
108
+ <p>This exposes the given PKCS#11 module or tokens over standard input and output. Those two forms, whether to expose a module or tokens, are mutually exclusive and if the second form is used, the tokens must belong to the same module.</p>
96
109
  </div>
97
110
  <div class="refsect1">
98
111
  <a name="p11-kit-bugs"></a><h2>Bugs</h2>
99
112
  <p>
100
113
  Please send bug reports to either the distribution bug tracker
101
114
  or the upstream bug tracker at
102
- <a class="ulink" href="https://bugs.freedesktop.org/enter_bug.cgi?product=p11-glue&amp;component=p11-kit" target="_top">https://bugs.freedesktop.org/enter_bug.cgi?product=p11-glue&amp;component=p11-kit</a>.
115
+ <a class="ulink" href="https://github.com/p11-glue/p11-kit/issues/" target="_top">https://github.com/p11-glue/p11-kit/issues/</a>.
103
116
  </p>
104
117
  </div>
105
118
  <div class="refsect1">
106
119
  <a name="p11-kit-see-also"></a><h2>See also</h2>
107
120
  <span class="simplelist"><span class="citerefentry"><span class="refentrytitle">pkcs11.conf</span>(5)</span></span><p>
108
121
  Further details available in the p11-kit online documentation at
109
- <a class="ulink" href="http://p11-glue.freedesktop.org/doc/p11-kit/" target="_top">http://p11-glue.freedesktop.org/doc/p11-kit/</a>.
122
+ <a class="ulink" href="https://p11-glue.github.io/p11-glue/p11-kit/manual/" target="_top">https://p11-glue.github.io/p11-glue/p11-kit/manual/</a>.
110
123
  </p>
111
124
  </div>
112
125
  </div>
113
126
  <div class="footer">
114
- <hr>Generated by GTK-Doc V1.25</div>
127
+ <hr>Generated by GTK-Doc V1.27</div>
115
128
  </body>
116
129
  </html>
@@ -3,12 +3,12 @@
3
3
  <head>
4
4
  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
5
5
  <title>pkcs11.conf: p11-kit</title>
6
- <meta name="generator" content="DocBook XSL Stylesheets V1.79.1">
6
+ <meta name="generator" content="DocBook XSL Stylesheets Vsnapshot">
7
7
  <link rel="home" href="index.html" title="p11-kit">
8
8
  <link rel="up" href="tools.html" title="Manual Pages">
9
9
  <link rel="prev" href="p11-kit.html" title="p11-kit">
10
10
  <link rel="next" href="trust.html" title="trust">
11
- <meta name="generator" content="GTK-Doc V1.25 (XML mode)">
11
+ <meta name="generator" content="GTK-Doc V1.27 (XML mode)">
12
12
  <link rel="stylesheet" href="style.css" type="text/css">
13
13
  </head>
14
14
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
@@ -106,6 +106,7 @@ x-custom : text
106
106
  for other programs using p11-kit. The base name of the process executable
107
107
  should be used here, for example
108
108
  <code class="literal">seahorse, ssh</code>.</p>
109
+ <p>This option can also be used to control whether the module will be loaded by <a class="link" href="sharing.html" title="Sharing PKCS#11 modules">the proxy module</a>. To enable loading only from the proxy module, specify <code class="literal">p11-kit-proxy</code> as the value.</p>
109
110
  <p>This is not a security feature. The argument is optional. If
110
111
  not present, then any process will load the module.</p>
111
112
  </td>
@@ -118,6 +119,7 @@ x-custom : text
118
119
  other programs using p11-kit. The base name of the process
119
120
  executable should be used here, for example
120
121
  <code class="literal">firefox, thunderbird-bin</code>.</p>
122
+ <p>This option can also be used to control whether the module will be loaded by <a class="link" href="sharing.html" title="Sharing PKCS#11 modules">the proxy module</a>. To disable loading from the proxy module, specify <code class="literal">p11-kit-proxy</code> as the value.</p>
121
123
  <p>This is not a security feature. The argument is optional. If
122
124
  not present, then any process will load the module.</p>
123
125
  </td>
@@ -250,11 +252,11 @@ remote: |ssh user@remote p11-kit remote /path/to/module.so
250
252
  <div class="refsect1">
251
253
  <a name="pkcs11-conf-see-also"></a><h2>See also</h2>
252
254
  <span class="simplelist"><span class="citerefentry"><span class="refentrytitle">p11-kit</span>(8)</span></span><p>Further details available in the p11-kit online documentation at
253
- <a class="ulink" href="http://p11-glue.freedesktop.org/doc/p11-kit/" target="_top">http://p11-glue.freedesktop.org/doc/p11-kit/</a>.
255
+ <a class="ulink" href="https://p11-glue.github.io/p11-glue/p11-kit/manual/" target="_top">https://p11-glue.github.io/p11-glue/p11-kit/manual/</a>.
254
256
  </p>
255
257
  </div>
256
258
  </div>
257
259
  <div class="footer">
258
- <hr>Generated by GTK-Doc V1.25</div>
260
+ <hr>Generated by GTK-Doc V1.27</div>
259
261
  </body>
260
262
  </html>
@@ -3,12 +3,12 @@
3
3
  <head>
4
4
  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
5
5
  <title>API Reference: p11-kit</title>
6
- <meta name="generator" content="DocBook XSL Stylesheets V1.79.1">
6
+ <meta name="generator" content="DocBook XSL Stylesheets Vsnapshot">
7
7
  <link rel="home" href="index.html" title="p11-kit">
8
8
  <link rel="up" href="index.html" title="p11-kit">
9
9
  <link rel="prev" href="trust.html" title="trust">
10
10
  <link rel="next" href="p11-kit-Modules.html" title="Modules">
11
- <meta name="generator" content="GTK-Doc V1.25 (XML mode)">
11
+ <meta name="generator" content="GTK-Doc V1.27 (XML mode)">
12
12
  <link rel="stylesheet" href="style.css" type="text/css">
13
13
  </head>
14
14
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
@@ -57,6 +57,10 @@
57
57
  </dt>
58
58
  <dd></dd>
59
59
  <dt>
60
+ <a class="link" href="p11-kit-Future.html#P11KitIterKind" title="enum P11KitIterKind">P11KitIterKind</a>, enum in <a class="link" href="p11-kit-Future.html" title="Future">Future</a>
61
+ </dt>
62
+ <dd></dd>
63
+ <dt>
60
64
  <a class="link" href="p11-kit-PIN-Callbacks.html#P11KitPin" title="P11KitPin">P11KitPin</a>, typedef in <a class="link" href="p11-kit-PIN-Callbacks.html" title="PIN Callbacks">PIN Callbacks</a>
61
65
  </dt>
62
66
  <dd></dd>
@@ -149,6 +153,10 @@
149
153
  </dt>
150
154
  <dd></dd>
151
155
  <dt>
156
+ <a class="link" href="p11-kit-Future.html#p11-kit-iter-get-kind" title="p11_kit_iter_get_kind ()">p11_kit_iter_get_kind</a>, function in <a class="link" href="p11-kit-Future.html" title="Future">Future</a>
157
+ </dt>
158
+ <dd></dd>
159
+ <dt>
152
160
  <a class="link" href="p11-kit-Future.html#p11-kit-iter-get-module" title="p11_kit_iter_get_module ()">p11_kit_iter_get_module</a>, function in <a class="link" href="p11-kit-Future.html" title="Future">Future</a>
153
161
  </dt>
154
162
  <dd></dd>
@@ -341,6 +349,14 @@
341
349
  </dt>
342
350
  <dd></dd>
343
351
  <dt>
352
+ <a class="link" href="p11-kit-Future.html#p11-kit-remote-serve-token" title="p11_kit_remote_serve_token ()">p11_kit_remote_serve_token</a>, function in <a class="link" href="p11-kit-Future.html" title="Future">Future</a>
353
+ </dt>
354
+ <dd></dd>
355
+ <dt>
356
+ <a class="link" href="p11-kit-Future.html#p11-kit-remote-serve-tokens" title="p11_kit_remote_serve_tokens ()">p11_kit_remote_serve_tokens</a>, function in <a class="link" href="p11-kit-Future.html" title="Future">Future</a>
357
+ </dt>
358
+ <dd></dd>
359
+ <dt>
344
360
  <a class="link" href="p11-kit-Future.html#p11-kit-set-progname" title="p11_kit_set_progname ()">p11_kit_set_progname</a>, function in <a class="link" href="p11-kit-Future.html" title="Future">Future</a>
345
361
  </dt>
346
362
  <dd></dd>
@@ -393,6 +409,14 @@
393
409
  </dt>
394
410
  <dd></dd>
395
411
  <dt>
412
+ <a class="link" href="p11-kit-URIs.html#p11-kit-uri-get-module-name" title="p11_kit_uri_get_module_name ()">p11_kit_uri_get_module_name</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
413
+ </dt>
414
+ <dd></dd>
415
+ <dt>
416
+ <a class="link" href="p11-kit-URIs.html#p11-kit-uri-get-module-path" title="p11_kit_uri_get_module_path ()">p11_kit_uri_get_module_path</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
417
+ </dt>
418
+ <dd></dd>
419
+ <dt>
396
420
  <a class="link" href="p11-kit-URIs.html#p11-kit-uri-get-pinfile" title="p11_kit_uri_get_pinfile ()">p11_kit_uri_get_pinfile</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
397
421
  </dt>
398
422
  <dd></dd>
@@ -417,6 +441,10 @@
417
441
  </dt>
418
442
  <dd></dd>
419
443
  <dt>
444
+ <a class="link" href="p11-kit-URIs.html#p11-kit-uri-get-vendor-query" title="p11_kit_uri_get_vendor_query ()">p11_kit_uri_get_vendor_query</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
445
+ </dt>
446
+ <dd></dd>
447
+ <dt>
420
448
  <a class="link" href="p11-kit-URIs.html#p11-kit-uri-match-attributes" title="p11_kit_uri_match_attributes ()">p11_kit_uri_match_attributes</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
421
449
  </dt>
422
450
  <dd></dd>
@@ -465,6 +493,14 @@
465
493
  </dt>
466
494
  <dd></dd>
467
495
  <dt>
496
+ <a class="link" href="p11-kit-URIs.html#p11-kit-uri-set-module-name" title="p11_kit_uri_set_module_name ()">p11_kit_uri_set_module_name</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
497
+ </dt>
498
+ <dd></dd>
499
+ <dt>
500
+ <a class="link" href="p11-kit-URIs.html#p11-kit-uri-set-module-path" title="p11_kit_uri_set_module_path ()">p11_kit_uri_set_module_path</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
501
+ </dt>
502
+ <dd></dd>
503
+ <dt>
468
504
  <a class="link" href="p11-kit-URIs.html#p11-kit-uri-set-pinfile" title="p11_kit_uri_set_pinfile ()">p11_kit_uri_set_pinfile</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
469
505
  </dt>
470
506
  <dd></dd>
@@ -484,6 +520,10 @@
484
520
  <a class="link" href="p11-kit-URIs.html#p11-kit-uri-set-unrecognized" title="p11_kit_uri_set_unrecognized ()">p11_kit_uri_set_unrecognized</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
485
521
  </dt>
486
522
  <dd></dd>
523
+ <dt>
524
+ <a class="link" href="p11-kit-URIs.html#p11-kit-uri-set-vendor-query" title="p11_kit_uri_set_vendor_query ()">p11_kit_uri_set_vendor_query</a>, function in <a class="link" href="p11-kit-URIs.html" title="URIs">URIs</a>
525
+ </dt>
526
+ <dd></dd>
487
527
  </div>
488
528
  <div class="glossary">
489
529
  <div class="titlepage"><div><div><h2 class="title">
@@ -512,6 +552,6 @@
512
552
  </div>
513
553
  </div>
514
554
  <div class="footer">
515
- <hr>Generated by GTK-Doc V1.25</div>
555
+ <hr>Generated by GTK-Doc V1.27</div>
516
556
  </body>
517
557
  </html>
@@ -0,0 +1,230 @@
1
+ <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2
+ <html>
3
+ <head>
4
+ <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
5
+ <title>Remoting / Forwarding: p11-kit</title>
6
+ <meta name="generator" content="DocBook XSL Stylesheets Vsnapshot">
7
+ <link rel="home" href="index.html" title="p11-kit">
8
+ <link rel="up" href="index.html" title="p11-kit">
9
+ <link rel="prev" href="sharing.html" title="Proxy Module">
10
+ <link rel="next" href="trust-module.html" title="Trust Policy Module">
11
+ <meta name="generator" content="GTK-Doc V1.27 (XML mode)">
12
+ <link rel="stylesheet" href="style.css" type="text/css">
13
+ </head>
14
+ <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
15
+ <table class="navigation" id="top" width="100%" summary="Navigation header" cellpadding="2" cellspacing="5"><tr valign="middle">
16
+ <td width="100%" align="left" class="shortcuts"></td>
17
+ <td><a accesskey="h" href="index.html"><img src="home.png" width="16" height="16" border="0" alt="Home"></a></td>
18
+ <td><img src="up-insensitive.png" width="16" height="16" border="0"></td>
19
+ <td><a accesskey="p" href="sharing.html"><img src="left.png" width="16" height="16" border="0" alt="Prev"></a></td>
20
+ <td><a accesskey="n" href="trust-module.html"><img src="right.png" width="16" height="16" border="0" alt="Next"></a></td>
21
+ </tr></table>
22
+ <div class="chapter">
23
+ <div class="titlepage"><div><div><h1 class="title">
24
+ <a name="remoting"></a>Remoting / Forwarding</h1></div></div></div>
25
+ <p>Smartcards or hardware security modules (HSM) are technologies to
26
+ keep private keys on devices physically isolated to a device only available
27
+ to the user. That way only the intended user can use that device to authenticate,
28
+ authorize or perform other functions that involve the private keys. These come
29
+ usually in the form of a USB device or token which is plugged into the local computer.
30
+ </p>
31
+ <p>In modern "cloud" computing, it is often desirable to virtually transfer such
32
+ a device on remote servers. For example, one can sign software or documents on a remote
33
+ server, use the local smart card to authorize itself to Kerberos, or any other
34
+ possible use. There are various approaches to tackle that problem, and on different
35
+ levels of the smart card application stack. It is possible to forward the USB
36
+ device holding the smart card, or forward the lower-level PC/SC protocol which
37
+ some smart cards talk, or forward the high-level interface used to communicate
38
+ with smart cards, the PKCS#11 interface.</p>
39
+ <p>To address that problem, in p11-kit, we allow the forwarding of
40
+ the higher level smart card interface, PKCS#11. In the following paragraphs
41
+ we describe the approach and tools needed to perform that forwarding over SSH
42
+ secure communication channels.</p>
43
+ <div class="refsect1">
44
+ <a name="remoting-scenario"></a><h2>Scenario</h2>
45
+ <p>We assume having a local workstation, and a remote server. On the local
46
+ computer we have inserted a smart card, in our examples we use a Nitrokey
47
+ card with the OpenSC drivers. We will forward the card
48
+ from the workstation to the remote server.</p>
49
+ </div>
50
+ <div class="refsect1">
51
+ <a name="remoting-setup"></a><h2>Setting up the PKCS#11 forwarding server on a local client</h2>
52
+ <p>To forward a smartcard to a remote server, we first need to identify which
53
+ smartcards are available. To list the smartcards currently attached to the local
54
+ computer, use the p11tool command from the gnutls package. For example:
55
+ </p>
56
+ <pre class="programlisting">
57
+ $ p11tool --list-tokens
58
+ ...
59
+ Token 6:
60
+ URL: pkcs11:model=PKCS%2315%20emulated;manufacturer=www.CardContact.de;serial=DENK0000000;token=UserPIN%20%28Daiki%27s%20token%29
61
+ Label: UserPIN (Daiki's token)
62
+ Type: Hardware token
63
+ Manufacturer: www.CardContact.de
64
+ Model: PKCS#15 emulated
65
+ Serial: DENK0000000
66
+ Module: opensc-pkcs11.so
67
+ ...
68
+ </pre>
69
+ <p>This is the entry for the card we'd like to forward to remote system. The important
70
+ pieces are the 'pkcs11:' URL listed above, and the module name. Once we determine which
71
+ smartcard to forward, we expose it to a local Unix domain socket, with the following
72
+ p11-kit server command.
73
+ </p>
74
+ <pre class="programlisting">
75
+ $ p11-kit server --provider /usr/lib64/pkcs11/opensc-pkcs11.so "pkcs11:model=PKCS%2315%20emulated;manufacturer=www.CardContact.de;serial=DENK0000000;token=UserPIN%20%28Daiki%27s%20token%29"
76
+ </pre>
77
+ <p>Here we provide to the server the module location (optional) with the --provider
78
+ option, as well as the URL of the card. We copied the values from the Module and URL
79
+ lines of the p11tool output above. When the p11-kit server command starts, it will
80
+ print the address of the PKCS#11 unix domain socket and the process ID of the server.
81
+ </p>
82
+ <pre class="programlisting">
83
+ P11_KIT_SERVER_ADDRESS=unix:path=/run/user/12345/p11-kit/pkcs11-12345
84
+ P11_KIT_SERVER_PID=12345
85
+ </pre>
86
+ <p>For later use, set the variables output by the tool on your shell prompt
87
+ (e.g., copy and paste them or call the above p11-kit server command line with
88
+ <code class="literal">eval $(p11-kit server ...)</code>).
89
+ </p>
90
+ </div>
91
+ <div class="refsect1">
92
+ <a name="remoting-forwarding-socket"></a><h2>Forwarding and using the PKCS#11 Unix socket on the remote server</h2>
93
+ <p>On the remote server, we will initially forward the previously generated PKCS#11
94
+ unix socket, and then access the smart card through it. To access the forwarded socket
95
+ as if it were a smart card, a dedicated PKCS#11 module p11-kit-client.so is provided as
96
+ part of the p11-kit-server package.
97
+ </p>
98
+ </div>
99
+ <div class="refsect1">
100
+ <a name="remoting-forwarding-socket-prep"></a><h2>Preparing the remote system for PKCS#11 socket forwarding</h2>
101
+ <p>One important detail you should be aware of, is the file system location of the
102
+ forwarded socket. By convention, the p11-kit-client.so module utilizes the "user runtime
103
+ directory", managed by systemd; the directory is created when a user logs in, and removed
104
+ upon logout, so that the user doesn't need to manually clean up the socket file.
105
+ </p>
106
+ <p>To locate your user runtime directory, do:
107
+ </p>
108
+ <pre class="programlisting">
109
+ $ systemd-path user-runtime
110
+ /run/user/1000
111
+ </pre>
112
+ <p>The <code class="literal">p11-kit-client.so</code> module looks for the socket file under a
113
+ subdirectory (<code class="literal">/run/user/1000/p11-kit</code> in this example). To enable
114
+ auto-creation of the directory, do the following.
115
+ </p>
116
+ <pre class="programlisting">
117
+ $ systemctl --user enable p11-kit-client.service
118
+ </pre>
119
+ </div>
120
+ <div class="refsect1">
121
+ <a name="remoting-finally-forwarding"></a><h2>Forwarding the PKCS#11 socket</h2>
122
+ <p>We will use ssh to forward the local PKCS#11 unix socket to the remote server.
123
+ Following the p11-kit-client convention, we will forward the socket to the remote user
124
+ run-time path so that cleaning up on disconnect is not required. The remote location
125
+ of the run-time path can be obtained as follows.
126
+ </p>
127
+ <pre class="programlisting">
128
+ $ ssh [user]@[remotehost] systemd-path user-runtime
129
+ /run/user/1000
130
+ </pre>
131
+ <p>The number at the end of the path above is your user ID in that system
132
+ (and thus will vary from user to user). You can now forward the Unix domain socket
133
+ with the -R option of the ssh command, after replacing the example path with the
134
+ actual run-time path.
135
+ </p>
136
+ <pre class="programlisting">
137
+ $ ssh -R /run/user/[userID]/p11-kit/pkcs11:${P11_KIT_SERVER_ADDRESS#*=} [user]@[remotehost]
138
+ </pre>
139
+ <p>After successfully logging in to the remote host, you can use the forwarded
140
+ smartcard as if it were directly connected to the server using the
141
+ <code class="literal">p11-kit-client.so</code>. Note that if any error occurs during the forwarding
142
+ setup, you will see something like this on your terminal:
143
+ </p>
144
+ <pre class="programlisting">
145
+ Warning: remote port forwarding failed for listen path /run/user/...
146
+ </pre>
147
+ </div>
148
+ <div class="refsect1">
149
+ <a name="remoting-using"></a><h2>Using the forwarded PKCS#11 socket</h2>
150
+ <p>Let's first make sure the smart card works on the remote system, by listing it:
151
+ </p>
152
+ <pre class="programlisting">
153
+ $ ls -l /run/user/1000/p11-kit/pkcs11
154
+
155
+ $ p11tool --provider /usr/lib64/pkcs11/p11-kit-client.so --list-tokens
156
+ ...
157
+ Token 0:
158
+ URL: pkcs11:model=PKCS%2315%20emulated;manufacturer=www.CardContact.de;serial=DENK0000000;token=UserPIN%20%28Daiki%27s%20token%29
159
+ Label: UserPIN (Daiki's token)
160
+ Type: Hardware token
161
+ Manufacturer: www.CardContact.de
162
+ Model: PKCS#15 emulated
163
+ Serial: DENK0000000
164
+ Module: (null)
165
+ ...
166
+ </pre>
167
+ <p>We can similarly generate, copy objects or test certificates to the card using
168
+ the same command. Any applications which support PKCS#11 can perform cryptographic
169
+ operations through the client module.
170
+ </p>
171
+ </div>
172
+ <div class="refsect1">
173
+ <a name="remoting-registering"></a><h2>Registering the client module for use with OpenSSL and GnuTLS apps</h2>
174
+ <p>To utilize the p11-kit-client module with OpenSSL (via engine_pkcs11 provided
175
+ by the libp11 package) and GnuTLS applications, you have to register it in
176
+ p11-kit. To do it for the current user, use the following commands:
177
+ </p>
178
+ <pre class="programlisting">
179
+ $ mkdir .config/pkcs11/modules/
180
+ $ echo "module: /usr/lib64/pkcs11/p11-kit-client.so" &gt;.config/pkcs11/modules/p11-kit-client.module
181
+ </pre>
182
+ <p>Once this is done both OpenSSL and GnuTLS applications should work, for example:
183
+ </p>
184
+ <pre class="programlisting">
185
+ $ URL="pkcs11:model=PKCS%2315%20emulated;manufacturer=www.CardContact.de;serial=DENK0000000;token=UserPIN%20%28Daiki%27s%20token%29"
186
+
187
+ # Generate a key using gnutls’ p11tool
188
+ $ p11tool --generate-ecc --login --label test-key "$URL"
189
+
190
+ # generate a certificate request with the previous key using openssl
191
+ $ openssl req -engine pkcs11 -new -key "$URL;;object=test-key;type=private;pin-value=XXXX" \
192
+ -keyform engine -out req.pem -text -subj "/CN=Test user"
193
+ </pre>
194
+ <p>Note that the token URL remains the same in the forwarded system as in the original one.
195
+ </p>
196
+ </div>
197
+ <div class="refsect1">
198
+ <a name="remoting-ssh"></a><h2>Using the client module with OpenSSH</h2>
199
+ <p>To re-use the already forwarded smartcard for authentication with another remote host, you can run ssh and provide the -I option with p11-kit-client.so. For example:
200
+ </p>
201
+ <pre class="programlisting">
202
+ $ ssh -I /usr/lib64/pkcs11/p11-kit-client.so [user]@[anotherhost]
203
+ </pre>
204
+ </div>
205
+ <div class="refsect1">
206
+ <a name="remoting-nss"></a><h2>Using the client module with NSS applications</h2>
207
+ <p>To register the forwarded smartcard in NSS applications, you can set it up with
208
+ the modutil command, as follows.
209
+ </p>
210
+ <pre class="programlisting">
211
+ $ sudo modutil -dbdir /etc/pki/nssdb -add p11-kit-client -libfile /usr/lib64/pkcs11/p11-kit-client.so
212
+
213
+ $ modutil -dbdir /etc/pki/nssdb -list
214
+ ...
215
+ 3. p11-kit-client
216
+ library name: /usr/lib64/pkcs11/p11-kit-client.so
217
+ uri: pkcs11:library-manufacturer=OpenSC%20Project;library-description=OpenSC%20smartcard%20framework;library-version=0.17
218
+ slots: 1 slot attached
219
+ status: loaded
220
+
221
+ slot: Nitrokey Nitrokey HSM (010000000000000000000000) 00 00
222
+ token: UserPIN (Daiki's token)
223
+ uri: pkcs11:token=UserPIN%20(Daiki's%20token);manufacturer=www.CardContact.de;serial=DENK0000000;model=PKCS%2315%20emulated
224
+ </pre>
225
+ </div>
226
+ </div>
227
+ <div class="footer">
228
+ <hr>Generated by GTK-Doc V1.27</div>
229
+ </body>
230
+ </html>