Stef Walter: Importing certificates and keys

Wednesday, October 5, 2011

Importing certificates and keys

I've been working on an importer for keys and certificates that can work with PKCS#11 key storage, such as smart cards, NSS or gnome-keyring.

Here's a demo of it in action. If you want to try this out yourself, you'll need:

latest gcr library from gnome-keyring git master
p11-kit 0.7 or later
OpenSC configured to show up in p11-kit
NSS configured to show up in p11-kit
an OpenSC patch for mlock issue
an Entersafe based smart card, like the Feitan 310 or 301.
the smart card needs to be initialized

It's possible that this works with other smart cards too, but I haven't tested it. By the way, if you want to help work on smart cards support, Gooze gives away free smart cards for open source developers working on this stuff.

On to the demo...

View the Importer demo from Stef Walter on Vimeo.

The importer and all the widgets are available for use by other apps in the gcr library. So Seahorse has the same interface:

As you might note, I've been reworking the Seahorse user interface, more about that coming soon...

3 comments:

JuanNovember 3, 2011 at 3:31 AM
Hi Stef, any date to see this great change on gnome stable brach?
ReplyDelete
StefNovember 3, 2011 at 3:45 AM
It'll be released with gnome 3.4. I think that's in March.
ReplyDelete
JuanNovember 4, 2011 at 9:01 AM
Wow, that was a fast answer!

Until 3.4 arrive, Is there any way to import a personal certificate to use it on Epiphany? I tried with:

pk12util -d sql:$HOME/.pki/nssdb -i PKCS12_file.p12

And the certificate is shown when listing nssdb certs, but Epiphany isn't aware of it :(.

Thanks Stef and keep the good work!
ReplyDelete

Add comment