macOS
brew install p11-kitlocal Homebrew formula metadata
sudo port install p11-kitMacPorts ports tree · security/p11-kit/Portfile · Quelle: api.github.com
brew / Rang 54
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für p11-kit in AI-Agent-Workflows.
Installation
brew install p11-kitlocal Homebrew formula metadata
sudo port install p11-kitMacPorts ports tree · security/p11-kit/Portfile · Quelle: api.github.com
sudo apk add p11-kitAlpine Linux edge package indexes · p11-kit · Quelle: dl-cdn.alpinelinux.org
sudo apt install p11-kitDebian stable package indexes · p11-kit · Quelle: deb.debian.org
sudo dnf install p11-kitFedora Rawhide package metadata · p11-kit · Quelle: dl.fedoraproject.org
nix profile install nixpkgs#p11-kitnixpkgs package indexes · pkgs/by-name/p1/p11-kit/package.nix · Quelle: api.github.com
sudo pacman -S p11-kitArch Linux sync databases · p11-kit · Quelle: geo.mirror.pkgbuild.com
sudo zypper install p11-kitopenSUSE Tumbleweed package metadata · p11-kit · Quelle: download.opensuse.org
Überblick
Library to load and enumerate PKCS#11 modules
Verlauf
p11-kit provides shared infrastructure for discovering, loading, and coordinating PKCS #11 modules and for exposing system trust policy.
p11-kit was established within the p11-glue project family to coordinate PKCS #11 modules used by multiple components in the same process and to define a consistent module-discovery configuration.
The project subsequently incorporated trust-policy tooling, module proxying, remoting, and command-line facilities for inspecting configured modules and tokens. It remains actively maintained, with releases in the 0.26 series during 2026.
p11-kit became common Linux security infrastructure because it gives applications a shared mechanism for discovering PKCS #11 providers and coordinating their initialization.
Its trust module is also used by distributions to expose centrally managed certificate trust policy and to extract that policy into formats consumed by TLS libraries and applications. The input records packages across major Linux families, Homebrew, MacPorts, Nix, and Arch Linux.
Applications use the p11-kit library or proxy to load configured PKCS #11 providers. Administrators install one .module file per provider and can apply global or per-user overrides.
The p11-kit command lists modules and operates on configured tokens; the trust command lists, stores, removes, and extracts trust anchors. Secret keys and PINs belong to the backing PKCS #11 token or provider, not to a p11-kit credentials file.
The documented paths are build-time configurable. The listed /etc/pkcs11 and $HOME/.pkcs11 locations are the upstream usual/default layouts.
p11-kit centralizes two areas that otherwise tend to fragment across applications: PKCS #11 module discovery and system trust policy. This reduces duplicated provider configuration and helps distributions apply certificate policy consistently.
It is often an invisible dependency, but its module files and trust extraction can affect smart cards, hardware tokens, TLS clients, desktop components, and system-wide certificate validation.
Sicherheitslage
library-like package without higher-risk signals.
grün Risiko · niedrig Konfidenz · appliance
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
pkcs11.conf*.module files in the p11-kit modules configuration directoryExecutables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
p11-kit | cli | globales Executable | |
trust | cli | globales Executable |
Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
https://github.com/p11-glue/p11-kit
Installationsmetadaten
| Paketschlüssel | brew:p11-kit |
|---|---|
| Version | 0.26.5 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/p11-kit |
| Homepage | https://p11-glue.github.io/p11-glue/p11-kit.html |
| Repository | https://github.com/p11-glue/p11-kit |
| Upstream-Dokumentation | https://p11-glue.github.io/p11-glue/p11-kit.html |
| Lizenz | BSD-3-Clause |
| Quellarchiv | https://github.com/p11-glue/p11-kit/releases/download/0.26.5/p11-kit-0.26.5.tar.xz |
| Zuletzt aktualisiert | 2026-09-10T11:33:13Z |
| Pulse | updated |
| Abhängigkeiten | ca-certificates, libtasn1 |
| Build-Abhängigkeiten | meson, ninja, pkgconf |
| Von macOS bereitgestellte Bibliotheken | libffi |
| Bottle | verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | p11-kit |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Source-Datenbank-Treffer
Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.
libp11-kit-dev 0.25.5-3
library for loading and coordinating access to PKCS#11 modules - development
https://p11-glue.github.io/p11-glue/p11-kit.html
sudo apt install libp11-kit-devlibp11-kit0 0.25.5-3
library for loading and coordinating access to PKCS#11 modules - runtime
https://p11-glue.github.io/p11-glue/p11-kit.html
sudo apt install libp11-kit0p11-kit 0.25.5-3
p11-glue utilities
https://p11-glue.github.io/p11-glue/p11-kit.html
sudo apt install p11-kitp11-kit-doc 0.25.5-3
library for loading and coordinating access to PKCS#11 modules - documentation
https://p11-glue.github.io/p11-glue/p11-kit.html
sudo apt install p11-kit-docp11-kit-modules 0.25.5-3
p11-glue proxy and trust modules
https://p11-glue.github.io/p11-glue/p11-kit.html
sudo apt install p11-kit-modulesp11-kit
nix profile install nixpkgs#p11-kitlibp11-kit-dev 0.25.3-4ubuntu2
library for loading and coordinating access to PKCS#11 modules - development
https://p11-glue.github.io/p11-glue/p11-kit.html
sudo apt install libp11-kit-devlibp11-kit0 0.25.3-4ubuntu2
library for loading and coordinating access to PKCS#11 modules - runtime
https://p11-glue.github.io/p11-glue/p11-kit.html
sudo apt install libp11-kit0p11-kit 0.25.3-4ubuntu2
p11-glue utilities
https://p11-glue.github.io/p11-glue/p11-kit.html
sudo apt install p11-kitp11-kit-doc 0.25.3-4ubuntu2
library for loading and coordinating access to PKCS#11 modules - documentation
https://p11-glue.github.io/p11-glue/p11-kit.html
sudo apt install p11-kit-docp11-kit-modules 0.25.3-4ubuntu2
p11-glue proxy and trust modules
https://p11-glue.github.io/p11-glue/p11-kit.html
sudo apt install p11-kit-modulesp11-kit 0.26.2-r1
Library for loading and sharing PKCS#11 modules
https://p11-glue.freedesktop.org/
sudo apk add p11-kitp11-kit-dev 0.26.2-r1
Library for loading and sharing PKCS#11 modules (development files)
https://p11-glue.freedesktop.org/
sudo apk add p11-kit-devp11-kit-doc 0.26.2-r1
Library for loading and sharing PKCS#11 modules (documentation)
https://p11-glue.freedesktop.org/
sudo apk add p11-kit-docp11-kit-server 0.26.2-r1
Server and client commands for p11-kit
https://p11-glue.freedesktop.org/
sudo apk add p11-kit-serverp11-kit-trust 0.26.2-r1
System trust module from p11-kit
https://p11-glue.freedesktop.org/
sudo apk add p11-kit-trustQuellspur
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
View the package source record on GitHub.