static GckSession*
open_and_login_session (GckSlot *slot, CK_USER_TYPE user_type, GError **error)
{
GckSession *session;
GError *err = NULL;
g_return_val_if_fail (GCK_IS_SLOT (slot), NULL);
if (!error)
error = &err;
session = gck_slot_open_session (slot, GCK_SESSION_READ_WRITE, NULL, error);
if (session != NULL) {
if (!gck_session_login (session, user_type, NULL, 0, NULL, error)) {
if (g_error_matches (*error, GCK_ERROR, CKR_USER_ALREADY_LOGGED_IN)) {
g_clear_error (error);
} else {
g_object_unref (session);
session = NULL;
}
}
}
return session;
}
gboolean
gkd_ssh_agent_initialize_with_module (GckModule *module)
{
GckSession *session = NULL;
GList *slots, *l;
GArray *mechs;
GError *error = NULL;
g_assert (GCK_IS_MODULE (module));
/* Find a good slot for our session keys */
slots = gck_module_get_slots (module, TRUE);
for (l = slots; session == NULL && l; l = g_list_next (l)) {
/* Check that it has the mechanisms we need */
mechs = gck_slot_get_mechanisms (l->data);
if (gck_mechanisms_check (mechs, CKM_RSA_PKCS, CKM_DSA, GCK_INVALID)) {
/* Try and open a session */
session = gck_slot_open_session (l->data, GCK_SESSION_AUTHENTICATE, NULL, &error);
if (!session) {
g_warning ("couldn't create pkcs#11 session: %s", egg_error_message (error));
g_clear_error (&error);
}
}
g_array_unref (mechs);
}
gck_list_unref_free (slots);
if (!session) {
g_warning ("couldn't select a usable pkcs#11 slot for the ssh agent to use");
return FALSE;
}
g_assert (!pkcs11_modules);
pkcs11_modules = g_list_append (NULL, g_object_ref (module));
pkcs11_main_mutex = g_new0 (GMutex, 1);
g_mutex_init (pkcs11_main_mutex);
pkcs11_main_cond = g_new0 (GCond, 1);
g_cond_init (pkcs11_main_cond);
pkcs11_main_checked = FALSE;
pkcs11_main_session = session;
return TRUE;
}
gboolean
gkd_gpg_agent_initialize_with_module (GckModule *module)
{
GckSession *session = NULL;
GckSlot *slot;
GError *error = NULL;
GList *modules;
g_assert (GCK_IS_MODULE (module));
/*
* Find the right slot.
*/
modules = g_list_append (NULL, module);
slot = gck_modules_token_for_uri (modules, "pkcs11:token=Secret%20Store", &error);
g_list_free (modules);
if (!slot) {
g_warning ("couldn't find secret store module: %s", egg_error_message (error));
g_clear_error (&error);
return FALSE;
}
/* Try and open a session */
session = gck_slot_open_session (slot, GCK_SESSION_READ_WRITE | GCK_SESSION_AUTHENTICATE, NULL, &error);
g_object_unref (slot);
if (!session) {
g_warning ("couldn't select a usable pkcs#11 slot for the gpg agent to use");
g_clear_error (&error);
return FALSE;
}
pkcs11_module = g_object_ref (module);
pkcs11_main_mutex = g_mutex_new ();
pkcs11_main_cond = g_cond_new ();
pkcs11_main_checked = FALSE;
pkcs11_main_session = session;
cache_settings = g_settings_new ("org.mate.crypto.cache");
return TRUE;
}
