Comments (4)
I would say this is an expected behavior. The trust module recognizes the file format in the following order: the p11-kit persistent file format, DER, and PEM. So if it found the marker ([p11-kit-object-v1]
), it treats the entire file as a p11-kit persistent file.
Re warning message: it was turned off by f992eb6. You can still see it when you set P11_KIT_DEBUG=all. We can certainly make trust list
more verbose, but it's not trivial because the message comes from the trust module.
from p11-kit.
ueno commented
I would say this is an expected behavior. The trust module recognizes the file format in the following order: the p11-kit persistent file format, DER, and PEM. So if it found the marker ([p11-kit-object-v1]), it treats the entire file as a p11-kit persistent file.
Afaict this behavior does not match the documentation:
Files in the following formats are supported for loading by the trust policy module:
- X.509 certificates | X.509 certificates in raw DER format. [...]
- PEM certificates | X.509 certificates in PEM format. These have a BEGIN CERTIFICATE header. [...]
- OpenSSL trust certificates | OpenSSL specific certificates in PEM format that contain trust information. These have a BEGIN TRUSTED CERTIFICATE PEM header. [...]
from p11-kit.
I know. I meant that it could be only fixed by updating the documentation.
from p11-kit.
After a second thought, it is actually possible to fall back to PEM blobs if the file is not parsable as p11-kit persistent format. I have updated the linked PR to cover this.
from p11-kit.
Related Issues (20)
- `p11-kit list-profiles` and `p11-kit delete-profile` should fail if there is no matching token
- Mark P11KitIter interface stable HOT 5
- Make separation of unit tests / integration tests clearer HOT 1
- Meson build failure in macOS Catalina (appleframeworks not found, tried framework) in p11-kit 0.25.1+ HOT 10
- CI: add shellcheck GitHub action
- p11-kit generate-keypair should allow setting CKA_ID
- Build failure with stricter C compilers (e.g. GCC 14) HOT 2
- consider renaming parameter name "template"
- MacOS wrong library file name p11-kit-trust
- RPC: Message-Based Encryption and Signing Functions: `pParameter` can be "either an input or an output parameter"
- Lists of mechanisms are different on local and remote SoftHSM2 HOT 4
- Unknown error 13 HOT 2
- [RFE] Bad module with C_GetInterface returning 0x54 - fallback to C_GetFunctionList HOT 2
- Different output from "list-objects" depending on client platform HOT 4
- ninja -C _build is failing HOT 5
- [Question] Alignment guarantees for CK_ATTRIBUTE HOT 5
- Add support for new mechanisms, for example SHA3 ones while remoting
- Compilation error on i386: passing argument 3 of 'p11_asn1_read' from incompatible pointer type HOT 2
- Test failure on 32-bit HOT 1
- 0.25.4 fails to compile on FreeBSD 14.0 (amd64) HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from p11-kit.