diff options
| author | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2018-05-18 09:19:16 +0200 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2018-05-21 11:50:53 +0200 |
| commit | 85c056eec61eecfb7754ffea2626cc17799abcad (patch) | |
| tree | 4ac631339e0591ead35a6cf3cd873e88bd8b2a3e /doc/cha-tokens.texi | |
| parent | 7f75d92eb2150a1b1cfb168fcf6d2c7d5c9bfd78 (diff) | |
| download | gnutls-85c056eec61eecfb7754ffea2626cc17799abcad.tar.gz | |
gnutls_pkcs11_token_get_ptr, gnutls_pkcs11_obj_get_ptr: introduced
This allows an application to open a PKCS#11 token using a URI,
and use it directly, bypassing gnutls. That is useful to take
advantage of PKCS#11 functionality not wrapped by gnutls but
still use PKCS#11 URIs to identify the token.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
Diffstat (limited to 'doc/cha-tokens.texi')
| -rw-r--r-- | doc/cha-tokens.texi | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/doc/cha-tokens.texi b/doc/cha-tokens.texi index 5915965d47..d984afcc4d 100644 --- a/doc/cha-tokens.texi +++ b/doc/cha-tokens.texi @@ -281,6 +281,7 @@ available in @code{gnutls/pkcs11.h}. * Accessing objects that require a PIN:: * Reading objects:: * Writing objects:: +* PKCS11 Low Level Access:: * Using a PKCS11 token with TLS:: * Verifying certificates over PKCS11:: * p11tool Invocation:: @@ -466,6 +467,19 @@ entered before accessing the object (for operations or otherwise). @showfuncdesc{gnutls_pkcs11_delete_url} +@node PKCS11 Low Level Access +@subsection Low Level Access + +When it is needed to use PKCS#11 functionality which is not wrapped by +GnuTLS, it is possible to extract the PKCS#11 session, object or token pointers. +That allows an application to still access the low-level functionality, +while at the same time take advantage of the URI addressing scheme supported +by GnuTLS. + +@showfuncdesc{gnutls_pkcs11_token_get_ptr} +@showfuncdesc{gnutls_pkcs11_obj_get_ptr} + + @node Using a PKCS11 token with TLS @subsection Using a @acronym{PKCS} #11 token with TLS |