mainGnuTLS - Support: sr #108557, PKCS11 cannot be turned off

 
 

sr #108557: PKCS11 cannot be turned off

Submitter:  Andrew Lutomirski <amluto>
Submitted:  Thu 24 Apr 2014 10:54:37 PM UTC
   
 
Category:  Core library Priority:  5 - Normal
Severity:  3 - Normal Status:  Done
Privacy:  Public Assigned to:  None
Open/Closed:  Closed Operating System:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Thu 24 Apr 2014 10:58:54 PM UTC, comment #1: 

Apparently fixed in 89e422bb710e45257d0c9074a8ef3107c795f7a3.  Sorry for the noise.

Andrew Lutomirski <amluto>
Thu 24 Apr 2014 10:54:37 PM UTC, original submission:  

Merely initializing PKCS11 does bad things.  For example, p11-kit registers an atfork handler, and the atfork handler is buggy.  This affects programs that don't use PKCS11 at all.

Now that GnuTLS automatically initializes itself, this even affects programs that merely link against GnuTLS but don't use it.

Please do not automatically initialize pkcs11, or at least defer initialization until the first use of PKCS11.  Most processes that use GnuTLS's services will probably not use PKCS11, and those that do should be the only ones that should be exposed to bugs in PKCS11 code.

Andrew Lutomirski <amluto>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by nmav (Updated the item)
  • -email is unavailable- added by amluto (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2014-04-28 nmav StatusNone Done
        Open/ClosedOpen Closed

    Back to the top

    Powered by Savane 3.13-3230.
    Corresponding source code