From 0968f903fe66f9bb8957b8d01e35f3743c74404b Mon Sep 17 00:00:00 2001 From: Stef Walter Date: Tue, 4 Nov 2014 11:31:31 +0100 Subject: Brought old blog over --- .../technical/importing-certificates-and-keys.md | 49 ++++++++++++++++++++++ 1 file changed, 49 insertions(+) create mode 100644 content/technical/importing-certificates-and-keys.md (limited to 'content/technical/importing-certificates-and-keys.md') diff --git a/content/technical/importing-certificates-and-keys.md b/content/technical/importing-certificates-and-keys.md new file mode 100644 index 0000000..0610dd2 --- /dev/null +++ b/content/technical/importing-certificates-and-keys.md @@ -0,0 +1,49 @@ +Title: Importing certificates and keys +Date: 2011-10-05 +Tags: technical, security, gnome +Slug: importing-certificates-and-keys + +I've been working on an importer for keys and certificates that can work +with PKCS#11 key storage, such as smart cards, NSS or gnome-keyring. + +Here's a demo of it in action. If you want to try this out yourself, +you'll need: + +- latest gcr library from [gnome-keyring git master][] +- [p11-kit 0.7][] or later +- [OpenSC configured][] to show up in p11-kit +- [NSS configured][] to show up in p11-kit +- an [OpenSC patch][] for mlock issue +- an Entersafe based smart card, like the [Feitan 310 or 301][]. +- the smart card [needs to be initialized][] + +It's possible that this works with other smart cards too, but I haven't +tested it. By the way, if you want to help work on smart cards support, +[Gooze gives away free smart cards][] for open source developers working +on this stuff. + +On to the demo... + + + +[View the Importer demo][] from [Stef Walter][] on [Vimeo][]. + +The importer and all the widgets are available for use by other apps in +the gcr library. So Seahorse has the same interface: + +![Seahorse importer](images/seahorse-importer.png) + +As you might note, I've been reworking the Seahorse user interface, more +about that coming soon... + + [gnome-keyring git master]: http://git.gnome.org/browse/gnome-keyring/ + [p11-kit 0.7]: http://p11-glue.freedesktop.org/releases/ + [OpenSC configured]: http://www.opensc-project.org/opensc/ticket/390 + [NSS configured]: https://live.gnome.org/CryptoGlue/Integration#NSS_libsoftokn3 + [OpenSC patch]: http://www.opensc-project.org/opensc/ticket/389 + [Feitan 310 or 301]: http://www.gooze.eu/ + [needs to be initialized]: http://www.gooze.eu/howto/smartcard-quickstarter-guide/smart-card-initialization + [Gooze gives away free smart cards]: http://www.gooze.eu/feitian-pki-free-software-developer-card + [View the Importer demo]: http://www.blogger.com/30069077 + [Stef Walter]: http://www.blogger.com/user6330669 + [Vimeo]: http://www.blogger.com/ -- cgit v1.2.3