Problems with automatic pkcs11 reinit on fork

[Nikos Mavrogiannopoulos]

On 10/10/2011 06:17 PM, Stef Walter wrote:

>> Then I'd have exactly the same problem that you have. Performance issues
>> :) It might be better for this issue to be solved once and for all users
>> of p11-kit.
> 
> It's pretty hard to do this correctly at the p11-kit layer. We cannot
> transparently hide the fact that all of a sudden all slots, token info,
> sessions, objects, and other handles have been invalidated. Therefore
> any structures that gnutls is holding must also be cleared on fork.
> 
> Forgive me if I'm missing something, but the only way I see to solve
> this part of the problem is for p11-kit to notify gnutls that any and
> all PKCS#11 state is invalid. gnutls would then start from a clean
> pkcs#11 state. I'll work on some patches for gnutls.

Hi any update on that (on the p11-kit part). Would p11-kit provide a
callback when reinitialization occurs, or should gnutls use pthread_atfork?

regards,
Nikos