Re: [systemd-devel] certificate and trust store feature for systemd

2022-05-25 Thread SCOTT FIELDS
The only tools I know of that manage the files in /etc/pki are part of “ca-certificates” and they only manage the CAs, not general app specific public/private keys. And even so, command line tools aren’t APIs. The prime reason you want an actual API that’s widely available is it encourages oth

Re: [systemd-devel] certificate and trust store feature for systemd

2022-05-25 Thread Barry Scott
> On 25 May 2022, at 19:22, SCOTT FIELDS wrote: > > If you’re referring to files in /etc/pki, that’s not a management API, like > CAPI or CNG provides in Windows (and a like API in OSX). There are tools that you run that manage the files. Sorry I do not have the details in front of me. The t

Re: [systemd-devel] certificate and trust store feature for systemd

2022-05-25 Thread SCOTT FIELDS
If you’re referring to files in /etc/pki, that’s not a management API, like CAPI or CNG provides in Windows (and a like API in OSX). There’s a keychain solution in Gnome (GNOME/Keyring) but not widely adopted that I’ve seen. This just seems a good match to have available within systemd From: B

Re: [systemd-devel] certificate and trust store feature for systemd

2022-05-25 Thread Barry Scott
> On 25 May 2022, at 14:06, SCOTT FIELDS wrote: > > I apologize for the very general inquiry. > > Are there any plans to have system natively support its own trust store for > items like CAs, x509 certs, passwords & truststores akin to the keychain in > Windows and OS X? But these are solv

[systemd-devel] Looking for an example of using systemd-sysupdate with portable services

2022-05-25 Thread Xe Iaso
Hello, I want to better understand how to use systemd-sysupdate and I'm not sure how to use it in conjuction with portable services. Do you have any documentation that I can use as guidance for setting this up? Specifically once the image files are downloaded, how do I get portabled to automatical

[systemd-devel] certificate and trust store feature for systemd

2022-05-25 Thread SCOTT FIELDS
I apologize for the very general inquiry. Are there any plans to have system natively support its own trust store for items like CAs, x509 certs, passwords & truststores akin to the keychain in Windows and OS X? I still find the management of PKIs in /etc/pki to be problematic. Having this ava