containers / ocicrypt

Encryption libraries for Encrypted OCI Container images
Apache License 2.0
133 stars 31 forks source link

Add functions for parsing a ocicrypt pkcs11 config file #30

Closed stefanberger closed 3 years ago

stefanberger commented 3 years ago

Add functions for parsing an ocicrypt pkcs11 config file and implement a function that returns an internal set of default module directories.

The go-pkcs11uri module has switched to a deny-all default policy for the modules allowed to be loaded. We now either have to call SetAllowAnyModule(true) or provide paths where the modules can be found. This primarily affects test cases where we now pass the same set of module directories to the function SetAllowedModulePaths().