Many of us on this alias are on holiday, so please be patient.

I don't know how the storage for the gnome-keyring compares to the 
existing storage of keys in Solaris. We certainly provide similar 
functionality via the Key Management Framework (KMF) but we don't have 
GUIs to manage keys. It would seem logical that JDS should be providing 
the appropriate GUIs. All three of the features you've listed are 
supported in Solaris so they should be supported by JDS.

--Glenn

Jeff Cai wrote:
> Not yet.
> I hope they can give me some feedback here.
>
> Jeff
>
> Alan Coopersmith ??:
>   
>> Have you asked the security community if these would be useful things to
>> support or not?
>>
>>     -Alan Coopersmith-           alan.coopersmith at sun.com
>>      Sun Microsystems, Inc. - X Window System Engineering
>>
>> Jeff Cai wrote:
>>     
>>> Since currently there is no needs for these features which are 
>>> relating to security, I've decided to disable them in gnome-keyring 
>>> 2.21. These include:
>>> 1. ssh support
>>> 2. public key certificates support (general certificate and x.509 
>>> certificate)
>>> 3. pkcs11 support (It is API interface standard for accessing 
>>> security devices such as smart card, usb disk etc.)
>>>
>>> A patch is attached and please review. I'll also ask community to 
>>> review it soon.
>>>
>>> Jeff
>>>
>>> Darren Kenny ??:
>>>       
>>>> Hi Damien,
>>>>
>>>> Jeff has taken ownership of GNOME Keyring due to his prior dealings 
>>>> with
>>>> encryption technologies.
>>>>
>>>> Jeff, do you know anything about this?
>>>>
>>>> Thanks,
>>>>
>>>> Darren.
>>>>
>>>> Do you know any more about this?
>>>>
>>>> Damien Carbery wrote:
>>>>  
>>>>         
>>>>> Ghee and Darren,
>>>>>
>>>>> gnome-keyring 2.21.x needs libtasn1 > 0.3.4.
>>>>> Should this be added or gnome-keyring left at 2.20.2?
>>>>>
>>>>> ftp://ftp.gnutls.org/pub/gnutls/libtasn1/
>>>>>
>>>>> Damien
>>>>>     
>>>>>           
>
> _______________________________________________
> security-discuss mailing list
> security-discuss at opensolaris.org
>   


Reply via email to