search for: jejb

...keys are already present in some token (so there's no way to pass in a file name). The candidate I have for this is openssh private keys based in the trusted platform module (either tpm 1.2 or tpm 2.0 ... we have engines for both). This is an example of my tpm2 based private/public ssh-key: jejb at jarvis:~> ssh-add -o tpm2 /home/jejb/.ssh/id_rsa Enter engine key passphrase: jejb at jarvis:~> ssh-add -l 2048 SHA256:ZAv7jrI2bB2VBgk5jHA1g/fe4rVX1GqyCdPwF0ELU9k jejb at mulgrave (RSA) jejb at jarvis:~> cat .ssh/id_rsa -----BEGIN TSS2 KEY BLOB----- MIICAAYFZ4EFCgKgAwEBAKEHAgUAgQAAAaKCA...

>> Let me rephrase my question: what does using OpenSSL engines enable >> that we can't already do via PKCS#11? > > It allows you to use the TPM2 as a secure key store, because there's no > current PKCS11 code for it. > > The essential difference is that Engine files are just that: flat files >

...his commit is also in the 07302012 -next patchset, and available here: git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending.git for-next-merge Or the 'for-linus' branch containing an -rc0 head @ commit bdc0077af57: Merge tag 'scsi-misc' of git://git.kernel.org/../jejb/scsi) rebased up to the last commit in scsi-misc required for virtio-scsi client LLD scanning logic to function properly with tcm_vhost fabric ports, is available here: git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending.git for-linus Both branches have gotten recent testing and h...

...his commit is also in the 07302012 -next patchset, and available here: git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending.git for-next-merge Or the 'for-linus' branch containing an -rc0 head @ commit bdc0077af57: Merge tag 'scsi-misc' of git://git.kernel.org/../jejb/scsi) rebased up to the last commit in scsi-misc required for virtio-scsi client LLD scanning logic to function properly with tcm_vhost fabric ports, is available here: git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending.git for-linus Both branches have gotten recent testing and h...

...different passwords). We'd need some build infrastructure to rebuild the token shared objects each time a key were added or changed. Presumably the shared object would be named similarly to the existing keys, so you don't get confused, so you'd do ssh-add -s /home/jejb/.ssh/id_rsa.so instead of ssh-add /home/jejb/.ssh/id_rsa And by the time I've done all the above, I'm back to what I had originally (plus a load of complexity): It's pretty much the engineering equivalent of applying sufficient force to get the round...

...RRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE] Logged in as jejb 0 status virtual/openstack (MESSAGES UNSEEN RECENT) Program received signal SIGSEGV, Segmentation fault. 0xb7f0814b in mail_search_args_deinit_sub (args=args at entry=0x8005caf0, arg=0x8005cb08) at mail-search.c:169 169 mail-search.c: No such file or directory. (gdb) bt #0 0xb7f0814b in...

...525b8f] Merge branch 'parisc-4.20-2' of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux git bisect bad c38239b4be1ac7e4bcf5bbd971353bae51525b8f # good: [d49f8a52b15bf35db778035340d8a673149f9f93] Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi git bisect good d49f8a52b15bf35db778035340d8a673149f9f93 # good: [ac747c0715f29c2be3848b719a1b7e65b07f7b21] Merge tag 'kbuild-v4.20' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild git bisect good ac747c0715f29c2be3848b719a1b7e65b07f7b21 # bad: [46972c03ab667dc2...

On Thu, Jan 26, 2017 at 11:41:09AM +0800, Fam Zheng wrote: > This implements the VIRTIO_SCSI_F_FC_HOST feature by reading the config > fields and presenting them as sysfs fc_host attributes. The config > change handler is added here because primary_active will toggle during > migration. Looks like there's active discussion on virtio tc mailing list. It's ok to post patches

On Thu, Jan 26, 2017 at 11:41:09AM +0800, Fam Zheng wrote: > This implements the VIRTIO_SCSI_F_FC_HOST feature by reading the config > fields and presenting them as sysfs fc_host attributes. The config > change handler is added here because primary_active will toggle during > migration. Looks like there's active discussion on virtio tc mailing list. It's ok to post patches

...'parisc-4.20- > 2' of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux > git bisect bad c38239b4be1ac7e4bcf5bbd971353bae51525b8f > # good: [d49f8a52b15bf35db778035340d8a673149f9f93] Merge tag 'scsi-misc' of > git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi > git bisect good d49f8a52b15bf35db778035340d8a673149f9f93 > # good: [ac747c0715f29c2be3848b719a1b7e65b07f7b21] Merge tag 'kbuild-v4.20' > of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild > git bisect good ac747c0715f29c2be3848b719a1b7e65b07f7b21 >...

This adds an smp_ops for voyager, and hooks things up appropriately. This is the first baby-step to making subarch runtime switchable. Signed-off-by: Jeremy Fitzhardinge <jeremy@xensource.com> Cc: James Bottomley <James.Bottomley@HansenPartnership.com> Cc: Eric W. Biederman <ebiederm@xmission.com> --- arch/i386/kernel/Makefile | 1 arch/i386/kernel/smp.c

This adds an smp_ops for voyager, and hooks things up appropriately. This is the first baby-step to making subarch runtime switchable. Signed-off-by: Jeremy Fitzhardinge <jeremy@xensource.com> Cc: James Bottomley <James.Bottomley@HansenPartnership.com> Cc: Eric W. Biederman <ebiederm@xmission.com> --- arch/i386/kernel/Makefile | 1 arch/i386/kernel/smp.c

...- >> 2' of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux >> git bisect bad c38239b4be1ac7e4bcf5bbd971353bae51525b8f >> # good: [d49f8a52b15bf35db778035340d8a673149f9f93] Merge tag 'scsi-misc' of >> git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi >> git bisect good d49f8a52b15bf35db778035340d8a673149f9f93 >> # good: [ac747c0715f29c2be3848b719a1b7e65b07f7b21] Merge tag 'kbuild-v4.20' >> of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild >> git bisect good ac747c0715f29c2be3848b719a1b7...

On Mon, 13 Aug 2018, Blumenthal, Uri - 0553 - MITLL wrote: > Lack of time on the Open Source projects is understandable, and not uncommon. > > However, PKCS11 has been in the codebase practically forever - the ECC > patches that I saw did not alter the API or such. It is especially > non-invasive when digital signature is concerned. > > Considering how long those patches have

...recedent of the storvsc driver. Hannes has a proposal to introduce timeouts in virtio, but this provides an immediate solution for stable kernels too. [mkp: fixed typo] Reported-by: Douglas Miller <dougmill at linux.vnet.ibm.com> Cc: "James E.J. Bottomley" <jejb at linux.vnet.ibm.com> Cc: "Martin K. Petersen" <martin.petersen at oracle.com> Cc: Hannes Reinecke <hare at suse.de> Cc: linux-scsi at vger.kernel.org Cc: stable at vger.kernel.org Signed-off-by: Paolo Bonzini <pbonzini at redhat.com> Signed-o...

...ong with target-pending.git/for-next-merge for KVM host + a virtio-scsi SCSI LLD bugfix for KVM guest that's headed into 3.6-rc1 here should be enough to get up and running: virtio-scsi: Add vdrv->scan for post VIRTIO_CONFIG_S_DRIVER_OK LUN scanning http://git.kernel.org/?p=linux/kernel/git/jejb/scsi.git;a=commitdiff;h=59057fbc37178f10a196ab7ec170b80273f75a47;hp=0b1017aab197271a78169fde3d7e487bb721997c Thanks! Nicholas Bellinger (1): virtio-scsi: Set max_target=0 during vhost-scsi operation Stefan Hajnoczi (8): notifier: add validity check and notify function virtio-pci: support h...

...ong with target-pending.git/for-next-merge for KVM host + a virtio-scsi SCSI LLD bugfix for KVM guest that's headed into 3.6-rc1 here should be enough to get up and running: virtio-scsi: Add vdrv->scan for post VIRTIO_CONFIG_S_DRIVER_OK LUN scanning http://git.kernel.org/?p=linux/kernel/git/jejb/scsi.git;a=commitdiff;h=59057fbc37178f10a196ab7ec170b80273f75a47;hp=0b1017aab197271a78169fde3d7e487bb721997c Thanks! Nicholas Bellinger (1): virtio-scsi: Set max_target=0 during vhost-scsi operation Stefan Hajnoczi (8): notifier: add validity check and notify function virtio-pci: support h...

Engine keys are keys whose file format is understood by a specific engine rather than by openssl itself. Since these keys are file based, the pkcs11 interface isn't appropriate for them because they don't actually represent tokens. The current most useful engine for openssh keys are the TPM engines, which allow all private keys to be stored in a form only the TPM hardware can decode,

...oposal to introduce timeouts in virtio, but this provides >> an immediate solution for stable kernels too. >> >> [mkp: fixed typo] >> >> Reported-by: Douglas Miller <dougmill at linux.vnet.ibm.com> >> Cc: "James E.J. Bottomley" <jejb at linux.vnet.ibm.com> >> Cc: "Martin K. Petersen" <martin.petersen at oracle.com> >> Cc: Hannes Reinecke <hare at suse.de> >> Cc: linux-scsi at vger.kernel.org >> Cc: stable at vger.kernel.org >> Signed-off-by: Paolo Bonzin...

...outs in virtio, but this provides >>> an immediate solution for stable kernels too. >>> >>> [mkp: fixed typo] >>> >>> Reported-by: Douglas Miller <dougmill at linux.vnet.ibm.com> >>> Cc: "James E.J. Bottomley" <jejb at linux.vnet.ibm.com> >>> Cc: "Martin K. Petersen" <martin.petersen at oracle.com> >>> Cc: Hannes Reinecke <hare at suse.de> >>> Cc: linux-scsi at vger.kernel.org >>> Cc: stable at vger.kernel.org >>> Signed-...