blob: 1602eb789f3e26be8f629d37cd4a28431bf1b516 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
.. highlightlang:: c
.. _KRB5-RESPONDER-QUESTION-PKINIT-data:
KRB5_RESPONDER_QUESTION_PKINIT
==============================
..
.. data:: KRB5_RESPONDER_QUESTION_PKINIT
..
PKINIT responder question.
The PKINIT responder question is asked when the client needs a password that's being used to protect key information, and is formatted as a JSON object. A specific identity's flags value, if not zero, is the bitwise-OR of one or more of the KRB5_RESPONDER_PKINIT_FLAGS_TOKEN_* flags defined below, and possibly other flags to be added later. Any resemblance to similarly-named CKF_* values in the PKCS#11 API should not be depended on.
*{*
*identity <string> : flags <number>,*
*...*
*}*
The answer to the question MUST be JSON formatted:
*{*
*identity <string> : password <string>,*
*...*
*}*
===================================== ======================
``KRB5_RESPONDER_QUESTION_PKINIT`` ``"pkinit"``
===================================== ======================
|
