Just wanted to keep folks in the loop. It turns out that the Secrets
API is still to young. I asked about the format to store credentials
in (as far as attributes), and got a response from a KDE developer
that says it's still to young on their front. They hope to have
support in the next release of KDE. But there's still the issue of
what attributes to use.
With that information, I went ahead and created a
gnome-credential-keyring that uses Gnome's Keyring facility. I still
need to do a few more things (mainly run it against Jeff's tests), but
it's generally working. Just wanted to keep folks in the loop.
Hopefully, I can get patches out this weekend.
Jeff: it would be really excellent to break out the various pieces. I
think it would also be better to split the asking for passwords from
the storing of passwords.
-John
On Thu, Oct 27, 2011 at 12:05:03PM -0400, John Szakmeister wrote:
Just wanted to keep folks in the loop. It turns out that the Secrets
API is still to young. I asked about the format to store credentials
in (as far as attributes), and got a response from a KDE developer
that says it's still to young on their front. They hope to have
support in the next release of KDE. But there's still the issue of
what attributes to use.
Thanks for looking into this. That explains why I had such trouble
finding good documentation on it.
With that information, I went ahead and created a
gnome-credential-keyring that uses Gnome's Keyring facility. I still
need to do a few more things (mainly run it against Jeff's tests), but
it's generally working. Just wanted to keep folks in the loop.
Hopefully, I can get patches out this weekend.
Great, I'm looking forward to reading it.
Jeff: it would be really excellent to break out the various pieces. I
think it would also be better to split the asking for passwords from
the storing of passwords.
That's my current plan. I just need to stop dragging my feet on
re-rolling the series.
-Peff
On Thu, Oct 27, 2011 at 1:48 PM, Jeff King [off-list ref] wrote:
On Thu, Oct 27, 2011 at 12:05:03PM -0400, John Szakmeister wrote:
[snip]
quoted
With that information, I went ahead and created a
gnome-credential-keyring that uses Gnome's Keyring facility. I still
need to do a few more things (mainly run it against Jeff's tests), but
it's generally working. Just wanted to keep folks in the loop.
Hopefully, I can get patches out this weekend.
Great, I'm looking forward to reading it.
I've pushed up the work I've done to:
<https://github.com/jszakmeister/git-credential-keyring>
There's not much to it. It also doesn't handle certs and that sort of
thing. I think we need to figure out which protocols need to be
handled differently so that we can use the appropriate api for the
keyring-like api. :-)
I also chose this way instead of a patch to git, because it appears
your work is no longer in pu (I must have missed the fact that it was
removed). Once your work makes it way back in, I can look into
getting it into the contrib area, if that's desired.
quoted
Jeff: it would be really excellent to break out the various pieces. I
think it would also be better to split the asking for passwords from
the storing of passwords.
That's my current plan. I just need to stop dragging my feet on
re-rolling the series.
Sounds good! I'll be happy to update when you do re-roll it. The
test you sent out was very helpful, BTW. I do think the test cases
with no context are a bit broken though. It doesn't seem right to ask
the storage backend to retrieve a password without any context at all,
IMHO. My implementation doesn't pass those two tests. It does pass
the rest of them though.
-John