]> git.ipfire.org Git - thirdparty/systemd.git/commit - src/cryptenroll/cryptenroll.c
ask-password: when querying for a password, try to read from credential store first
authorLennart Poettering <lennart@poettering.net>
Thu, 11 Mar 2021 19:17:10 +0000 (20:17 +0100)
committerLennart Poettering <lennart@poettering.net>
Fri, 26 Mar 2021 11:21:56 +0000 (12:21 +0100)
commit8806bb4bc7fa15d6ca46e81b8d535730209a3b66
tree95412964dee1dca33817f5fa6bb2150436338bf2
parentf6ab6199a2e8cbda64fe2574af572b8800da48bd
ask-password: when querying for a password, try to read from credential store first

This adds generic support for the SetCredential=/LoadCredential= logic
to our password querying infrastructure: if a password is requested by a
program that has a credential store configured via
$CREDENTIALS_DIRECTORY we'll look in it for a password.

The "systemd-ask-password" tool is updated with an option to specify the
credential to look for.
14 files changed:
man/systemd-ask-password.xml
src/ask-password/ask-password.c
src/cryptenroll/cryptenroll-password.c
src/cryptenroll/cryptenroll.c
src/cryptsetup/cryptsetup-fido2.c
src/cryptsetup/cryptsetup-pkcs11.c
src/cryptsetup/cryptsetup.c
src/home/homectl.c
src/shared/ask-password-api.c
src/shared/ask-password-api.h
src/shared/dissect-image.c
src/shared/libfido2-util.c
src/shared/pkcs11-util.c
src/shared/pkcs11-util.h