/usr/share/gtk-doc/html/p11-kit/sharing-module.html is in libp11-kit-dev 0.12-2ubuntu1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 | <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>Solution: proxy module</title>
<meta name="generator" content="DocBook XSL Stylesheets V1.76.1">
<link rel="home" href="index.html" title="p11-kit">
<link rel="up" href="sharing.html" title="Sharing PKCS#11 modules">
<link rel="prev" href="sharing-initialize.html" title="Solution: p11-kit">
<link rel="next" href="config.html" title="Developer and Packager Notes">
<meta name="generator" content="GTK-Doc V1.18 (XML mode)">
<link rel="stylesheet" href="style.css" type="text/css">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<table class="navigation" id="top" width="100%" summary="Navigation header" cellpadding="2" cellspacing="2"><tr valign="middle">
<td><a accesskey="p" href="sharing-initialize.html"><img src="left.png" width="24" height="24" border="0" alt="Prev"></a></td>
<td><a accesskey="u" href="sharing.html"><img src="up.png" width="24" height="24" border="0" alt="Up"></a></td>
<td><a accesskey="h" href="index.html"><img src="home.png" width="24" height="24" border="0" alt="Home"></a></td>
<th width="100%" align="center">p11-kit</th>
<td><a accesskey="n" href="config.html"><img src="right.png" width="24" height="24" border="0" alt="Next"></a></td>
</tr></table>
<div class="section">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
<a name="sharing-module"></a>Solution: proxy module</h2></div></div></div>
<p>When an application is aware of the fact that coordination
is necessary between multiple consumers of a PKCS#11 module, it
can link to p11-kit and use the functions there to provide
this coordination.</p>
<p>However most current consumers of PKCS#11 are ignorant of
this problem, and do not link to p11-kit. In order to solve this
multiple initialization problem for all applications,
<code class="literal">p11-kit</code> provides a proxy compatibility
module.</p>
<p>This proxy module acts like a normal PKCS#11 module, but
internally loads a preconfigured set of PKCS#11 modules and
coordinates their initialization and finalization. Each slot
in the configured modules is exposed as a slot of the
<code class="literal">p11-kit</code> proxy module. The proxy module is
then used as a normal PKCS#11 module would be. It can be loaded by
crypto libraries like NSS and behaves as expected.</p>
<p>The proxy module bends the PKCS#11 rules slightly. It does
not return the <code class="literal">CKR_CRYPTOKI_ALREADY_INITIALIZED</code>
error code as specified in PKCS#11. However this is a small
price to pay for this compatibility.</p>
</div>
<div class="footer">
<hr>
Generated by GTK-Doc V1.18</div>
</body>
</html>
|