opencryptoki

mirror of https://github.com/opencryptoki/opencryptoki.git synced 2026-10-24 05:39:17 +03:00

Files

Ingo Franzki 83086fb742 API: Don't advertise interfaces with CKF_INTERFACE_FORK_SAFE

PKCS#11 states for flag CKF_INTERFACE_FORK_SAFE:

"The returned interface will have fork tolerant semantics. When the
application forks, each process will get its own copy of all session
objects, session states, login states, and encryption states. Each
process will also maintain access to token objects with their previously
supplied handles."

This is not how Opencryptoki behaves. The forked child starts as if
cryptoki has never been initialized, it needs to initialize the cryptoki
library freshly with C_Initialize if needed.

Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>

2026-10-05 08:35:13 +02:00

api_interface.c

API: Don't advertise interfaces with CKF_INTERFACE_FORK_SAFE

2026-10-05 08:35:13 +02:00

api.mk

PKCSHSM_MK_CHANGE: Add warning about no permissions to use a token

2024-08-12 14:46:21 +02:00

apiproto.h

API: Prevent global session counters from overflowing

2026-08-19 08:27:38 +02:00

apiutil.c

API: Prevent global session counters from overflowing