kata-containers/s390-tools
1
0
Fork 0
mirror of https://github.com/ibm-s390-linux/s390-tools.git synced 2026-08-05 02:14:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

zkey: Add support for key management system plugins

Browse Source 
Add support to integrate external key management systems into zkey
by using a plugin concept. Add helper functions to load, bind, and
unbind a key management system plugin.

Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
This commit is contained in:
Ingo Franzki
2020-05-25 17:11:40 +02:00
committed by Jan Höppner
parent 13f8709ec2
commit f25aaf32b8
5 changed files with 1334 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
zkey/kms.h
+46
View File
@@ -0,0 +1,46 @@
/*
* zkey - Generate, re-encipher, and validate secure keys
*
* This header file defines functions for Key Management System (KMS) plugin
* handling
*
* Copyright IBM Corp. 2020
*
* s390-tools is free software; you can redistribute it and/or modify
* it under the terms of the MIT license. See LICENSE for details.
*/
#ifndef KMS_H
#define KMS_H
#include "kms-plugin.h"
#include "properties.h"
#include "keystore.h"
struct kms_info {
void *plugin_lib;
const struct kms_functions *funcs;
char *plugin_name;
struct properties *props;
struct kms_apqn *apqns;
size_t num_apqns;
kms_handle_t handle;
};
int list_kms_plugins(bool verbose);
int check_for_kms_plugin(struct kms_info *kms_info, bool verbose);
int init_kms_plugin(struct kms_info *kms_info, bool verbose);
void free_kms_plugin(struct kms_info *kms_info);
void print_last_kms_error(const struct kms_info *kms_info);
int bind_kms_plugin(struct keystore *keystore, const char *plugin,
bool verbose);
int unbind_kms_plugin(struct kms_info *kms_info, struct keystore *keystore,
bool verbose);
#endif