| /systemd-251/src/home/ |
| D | homectl-pkcs11.c | 16 const char *uri, in add_pkcs11_encrypted_key() argument
25 assert(uri); in add_pkcs11_encrypted_key()
42 JSON_BUILD_PAIR("uri", JSON_BUILD_STRING(uri)), in add_pkcs11_encrypted_key()
66 static int add_pkcs11_token_uri(JsonVariant **v, const char *uri) { in add_pkcs11_token_uri() argument
72 assert(uri); in add_pkcs11_token_uri()
80 if (strv_contains(l, uri)) in add_pkcs11_token_uri()
84 r = strv_extend(&l, uri); in add_pkcs11_token_uri()
146 const char *uri, in acquire_pkcs11_certificate() argument
152 …return pkcs11_acquire_certificate(uri, askpw_friendly_name, askpw_icon_name, ret_cert, ret_pin_use… in acquire_pkcs11_certificate()
159 int identity_add_pkcs11_key_data(JsonVariant **v, const char *uri) { in identity_add_pkcs11_key_data() argument
[all …]
|
| D | homework-pkcs11.c | 14 P11KitUri *uri, in pkcs11_callback() argument
29 assert(uri); in pkcs11_callback()
91 r = pkcs11_token_find_private_key(m, session, uri, &object); in pkcs11_callback()
|
| D | homework-pkcs11.h | 20 …d, const CK_SLOT_INFO *slot_info, const CK_TOKEN_INFO *token_info, P11KitUri *uri, void *userdata);
|
| D | homework.c | 133 r = pkcs11_find_token(data.encrypted_key->uri, pkcs11_callback, &data); in user_record_authenticate()
164 …red PKCS#11 security token %s does not decrypt encrypted key correctly.", data.encrypted_key->uri); in user_record_authenticate()
166 …"Decrypted password from PKCS#11 security token %s unlocks user record.", data.encrypted_key->uri); in user_record_authenticate()
1186 r = pkcs11_find_token(data.encrypted_key->uri, pkcs11_callback, &data); in user_record_compile_effective_passwords()
|
| /systemd-251/src/shared/ |
| D | pkcs11-util.c | 20 bool pkcs11_uri_valid(const char *uri) { in pkcs11_uri_valid() argument
25 if (isempty(uri)) in pkcs11_uri_valid()
28 p = startswith(uri, "pkcs11:"); in pkcs11_uri_valid()
44 _cleanup_(p11_kit_uri_freep) P11KitUri *uri = NULL; in uri_from_string()
49 uri = p11_kit_uri_new(); in uri_from_string()
50 if (!uri) in uri_from_string()
53 if (p11_kit_uri_parse(p, P11_KIT_URI_FOR_ANY, uri) != P11_KIT_URI_OK) in uri_from_string()
56 *ret = TAKE_PTR(uri); in uri_from_string()
61 P11KitUri *uri; in uri_from_module_info() local
65 uri = p11_kit_uri_new(); in uri_from_module_info()
[all …]
|
| D | pkcs11-util.h | 15 bool pkcs11_uri_valid(const char *uri);
46 …d, const CK_SLOT_INFO *slot_info, const CK_TOKEN_INFO *token_info, P11KitUri *uri, void *userdata);
50 int pkcs11_acquire_certificate(const char *uri, const char *askpw_friendly_name, const char *askpw_…
72 P11KitUri *uri,
|
| D | user-record.h | 179 char *uri; member
|
| D | user-record.c | 98 free(k->uri); in pkcs11_encrypted_key_done()
759 …SON_VARIANT_STRING, dispatch_pkcs11_uri, offsetof(Pkcs11EncryptedKey, uri), JSON_… in dispatch_pkcs11_key()
|
| /systemd-251/src/cryptsetup/ |
| D | cryptsetup-pkcs11.c | 98 _cleanup_free_ char *uri = NULL; in find_pkcs11_auto_data() local
130 if (uri) in find_pkcs11_auto_data()
142 uri = strdup(json_variant_string(w)); in find_pkcs11_auto_data()
143 if (!uri) in find_pkcs11_auto_data()
146 if (!pkcs11_uri_valid(uri)) in find_pkcs11_auto_data()
162 if (!uri) in find_pkcs11_auto_data()
166 log_info("Automatically discovered security PKCS#11 token '%s' unlocks volume.", uri); in find_pkcs11_auto_data()
168 *ret_uri = TAKE_PTR(uri); in find_pkcs11_auto_data()
|
| D | cryptsetup.c | 1104 const char *uri = NULL; in attach_luks_or_plain_or_bitlk_by_pkcs11() local
1120 uri = discovered_uri; in attach_luks_or_plain_or_bitlk_by_pkcs11()
1125 uri = arg_pkcs11_uri; in attach_luks_or_plain_or_bitlk_by_pkcs11()
1142 uri, in attach_luks_or_plain_or_bitlk_by_pkcs11()
1166 uri, friendly); in attach_luks_or_plain_or_bitlk_by_pkcs11()
|
| /systemd-251/src/cryptsetup/cryptsetup-tokens/ |
| D | luks2-pkcs11.c | 31 P11KitUri *uri, in luks2_pkcs11_callback() argument
44 assert(uri); in luks2_pkcs11_callback()
82 r = pkcs11_token_find_private_key(m, session, uri, &object); in luks2_pkcs11_callback()
236 _cleanup_free_ char *uri = NULL; in parse_luks2_pkcs11_data() local
254 uri = strdup(json_variant_string(w)); in parse_luks2_pkcs11_data()
255 if (!uri) in parse_luks2_pkcs11_data()
266 *ret_uri = TAKE_PTR(uri); in parse_luks2_pkcs11_data()
|
| /systemd-251/src/cryptenroll/ |
| D | cryptenroll-pkcs11.c | 15 const char *uri) { in enroll_pkcs11() argument
31 assert_se(uri); in enroll_pkcs11()
35 … r = pkcs11_acquire_certificate(uri, "volume enrollment operation", "drive-harddisk", &cert, NULL); in enroll_pkcs11()
88 JSON_BUILD_PAIR("pkcs11-uri", JSON_BUILD_STRING(uri)), in enroll_pkcs11()
|
| D | cryptenroll-pkcs11.h | 10 …l_pkcs11(struct crypt_device *cd, const void *volume_key, size_t volume_key_size, const char *uri);
12 …_pkcs11(struct crypt_device *cd, const void *volume_key, size_t volume_key_size, const char *uri) { in enroll_pkcs11() argument
|
| D | cryptenroll.c | 225 _cleanup_free_ char *uri = NULL; in parse_argv() local
235 r = pkcs11_find_token_auto(&uri); in parse_argv()
242 uri = strdup(optarg); in parse_argv()
243 if (!uri) in parse_argv()
248 arg_pkcs11_token_uri = TAKE_PTR(uri); in parse_argv()
|
| /systemd-251/man/ |
| D | yubikey-crypttab.sh | 21 sudo systemd-cryptenroll --pkcs11-token-uri=auto /dev/sdXn
24 sudo /usr/lib/systemd/systemd-cryptsetup attach mytest /dev/sdXn - pkcs11-uri=auto
|
| /systemd-251/shell-completion/bash/ |
| D | homectl | 63 --pkcs11-token-uri
|
| /systemd-251/docs/ |
| D | USER_RECORD.md | 637 an object consisting of three string fields: `uri` shall contain a PKCS#11
|
| /systemd-251/ |
| D | TODO | 1585 …- when "homectl --pkcs11-token-uri=" is used, synthesize ssh-authorized-keys records for all keys …
|
| D | NEWS | 3616 * homectl's --pkcs11-uri= setting now accepts two special parameters:
3988 pkcs11-uri= option in /etc/crypttab.
|