Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Quirk: no-operation-state #324

Merged
merged 2 commits into from
Dec 18, 2023
Merged

Conversation

0pq76r
Copy link

@0pq76r 0pq76r commented Dec 5, 2023

Configuration property to indicate whether the PKCS11 provider supports getting/setting the operation state. If it is not supported, no attempts will be made to duplicate the context.

I already mentioned it in the discussion (#320) that the current approach leaves traces in the SSL error stack.

Please let me know what you think of this change.

(Tests will follow)

@simo5
Copy link
Member

simo5 commented Dec 5, 2023

I think this looks good, but also think this option should be a quirk and not a full-fledged separate option.
See pkcs11-module-quirks and add "no-operation-state" as an option there?

@0pq76r 0pq76r force-pushed the feature/operation-state-quirk branch from a8e045f to 14ab66f Compare December 6, 2023 15:55
Copy link
Member

@simo5 simo5 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Only minor nits on the docs text, otherwise LGTM

docs/provider-pkcs11.7 Outdated Show resolved Hide resolved
docs/provider-pkcs11.7 Outdated Show resolved Hide resolved
docs/provider-pkcs11.7.md Outdated Show resolved Hide resolved
@0pq76r 0pq76r changed the title Configuration directive: pkcs11-module-supports-operation-state Quirk: no-operation-state Dec 7, 2023
@0pq76r 0pq76r force-pushed the feature/operation-state-quirk branch 4 times, most recently from 6d65ee0 to bd18833 Compare December 7, 2023 09:27
Configuration property to indicate whether the PKCS11 provider
supports getting/setting the operation state. If it is not supported,
no attempts will be made to duplicate the context.

Signed-off-by: Florian Wernli <[email protected]>
@0pq76r 0pq76r force-pushed the feature/operation-state-quirk branch 2 times, most recently from de01045 to 2ae7363 Compare December 8, 2023 08:25
@0pq76r 0pq76r marked this pull request as ready for review December 8, 2023 08:25
Test for quirk no-operation-state.

Signed-off-by: Florian Wernli <[email protected]>
@0pq76r 0pq76r force-pushed the feature/operation-state-quirk branch from 2ae7363 to 2f260f4 Compare December 12, 2023 13:11
@0pq76r 0pq76r requested a review from simo5 December 18, 2023 10:20
Copy link
Member

@simo5 simo5 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@simo5
Copy link
Member

simo5 commented Dec 18, 2023

Thanks, this looks good.
The only minor thing is that we should probably apply this to all operations state requests not just signature ones.
I'll file a followup issue to look at doing that in a separate PR though.

@simo5 simo5 merged commit e2abc4a into latchset:main Dec 18, 2023
14 of 19 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants