Index ¦ Archives ¦ Atom > Tag: technical

Redesigning the Seahorse Experience

As part of the work on getting smart cards into Seahorse, there’s some design work that needs to be done to make the new functionality usable. In particular, the overarching design goal is that Seahorse isn’t a tool we expect users to “learn”. Actions should follow mostly from …


Importing certificates and keys

I’ve been working on an importer for keys and certificates that can work with PKCS#11 key storage, such as smart cards, NSS or gnome-keyring.

Here’s a demo of it in action. If you want to try this out yourself, you’ll need:


Introspecting Certificates

Today I merged in a contribution from Evan Nemerson for GObject introspection support into the Gcr and Gck libraries. I ended up tweaking thousands of lines of comments and code, filed some bugs and so forth.

But the end result is you use PKCS#11 and stuff like the Gcr …


Smart card icons

I’ve been working on smart card integration into Seahorse, and as part of that we need icons for smart cards. I had fun putting together something today:

Smart card icons

Obviously not perfect, but I’m happy with the result. The tools and info in gnome-icon-theme are really nice.

At some point …


Viewer for Certificate and Key files

So a lot of the work I do doesn’t have any user interface. The best user interface is no user interface, well one that isn’t needed. But recently I’ve been working some tools to view the plethora of certificate and key formats out there. So I couldn …


Berlin and Desktop Summit Talk

Really enjoyed the Desktop Summit, and meeting everyone there. The only bummer part was the network connectivity. My employer Collabora sponsored my trip and work.

My talk went well (slides), and we had a great time discussing things afterwards. LWN wrote an article about the talk (the article will be …


How to build telepathy-qt4 with alternate prefix

Just figured out how to build telepathy-qt4 in an alternate prefix and also look for dependencies in that prefix as well. Since I don’t use cmake much these days, figured I’d post this so I could go and look back at it later. Depends on this fix.

PKG_CONFIG_PATH …

Going to the Desktop Summit

I’m off the the Desktop Summit shortly. Going to be giving a talk about gluing together desktop crypto (Oh boy, there’s a life size picture of me at that link. I wonder why it ended up so big? Hrmmmm….)

My first time in Berlin, and it sounds like …


The security devroom at FOSDEM

Went to FOSDEM last weekend. It was a cool and crazy conference: packed rooms, great talks, good friends, much beer. I enjoyed finally meeting the Collabora guys I’m now working with.

I hung out in the absolutely packed security devroom the first day, superbly organized by Martin Paljak from …


Implemented trust assertions and certificate chains

Trust assertions are bits of trust information used by applications to make trust decisions about certificates. For example, trust assertions can represent certificate authority anchors, pinned certificate exceptions, or revocation lists. Trust assertions do not represent the trust decision itself, but they’re used in a trust decision.

By using …

© Stef Walter. Built using Pelican. Theme by Giulio Fidente on github. .