mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
8c0f2491a3
To perform operations in EKMF Web, the user must log in with a EKMF Web user id and a time based one time passcode. The passcode can be obtained by the user from the EKMF Web user interface, after logging in into EKMF Web. That way a two factor authentication is performed. The client passes the passcode to EKMF Web retrieves a bearer token from EKMF Web which it then uses on subsequent requests to authenticate with EKMF Web. Such a bearer token is valid for several minutes, thus no re-login is required for zkey commands run during that time. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
29 lines
755 B
Plaintext
29 lines
755 B
Plaintext
LIBEKMFWEB_1.0 {
|
|
global:
|
|
ekmf_get_server_cert_chain;
|
|
ekmf_print_certificates;
|
|
ekmf_check_login_token;
|
|
ekmf_login;
|
|
ekmf_generate_identity_key;
|
|
ekmf_reencipher_identity_key;
|
|
ekmf_generate_csr;
|
|
ekmf_generate_ss_cert;
|
|
ekmf_get_public_key;
|
|
ekmf_retrieve_key;
|
|
ekmf_list_templates;
|
|
ekmf_get_template;
|
|
ekmf_get_last_seq_no;
|
|
ekmf_clone_template_info;
|
|
ekmf_free_template_info;
|
|
ekmf_list_keys;
|
|
ekmf_get_key_info;
|
|
ekmf_set_key_state;
|
|
ekmf_set_key_tags;
|
|
ekmf_delete_key_tags;
|
|
ekmf_clone_key_info;
|
|
ekmf_free_key_info;
|
|
ekmf_generate_key;
|
|
ekmf_curl_destroy;
|
|
local: *;
|
|
};
|