mdebray/tvl-depot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(ops/modules/open_eid.nix): Access all key slots

Browse source 
`onepin-opensc-pkcs11.so` only enables PIN1, but PIN2 is also required.

Change-Id: Ic1c34ca58a46c2978c7e27e7a9b7e6a4d335ac0c
Reviewed-on: https://cl.tvl.fyi/c/depot/+/5648
Tested-by: BuildkiteCI
Reviewed-by: flokli <flokli@flokli.de>
Reviewed-by: kn <klemens@posteo.de>
Reviewed-by: tazjin <tazjin@tvl.su>
This commit is contained in:
Klemens Nanni 2022-05-23 01:52:51 +02:00 committed by kn
parent 45c46d4a73
commit 3a53587c2a
1 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
ops/modules/open_eid.nix
View file

@ -23,9 +23,10 @@ in
{
services.pcscd.enable = true;
# Tell p11-kit to load onepin-opensc-pkcs11.so
environment.etc."pkcs11/modules/onepin-opensc-pkcs11".text = ''
module: ${pkgs.opensc}/lib/onepin-opensc-pkcs11.so
# Tell p11-kit to load/proxy opensc-pkcs11.so, providing all available slots
# (PIN1 for authentication/decryption, PIN2 for signing).
environment.etc."pkcs11/modules/opensc-pkcs11".text = ''
module: ${pkgs.opensc}/lib/opensc-pkcs11.so
'';
environment.systemPackages = with pkgs; [