KDE Utils/ksecretsservice
Structure
ksecretsservice is a secrets management infrastructure aiming to replace KDE_Utils/kwallet.
All the sources of this infrastructure are located on projects.kde.org [[1]]
| part | description |
|---|---|
| ksecretsserviced | store the secrets in a secure manner |
| ksecretsservice | Public API to be used by KDE applications |
| secretsync | Tool used to synchronize secrets between several devices |
| kio | Let users browse secrets using the ksecrets:// protocol |
| kwl2kss | KWallet to KSecretsService conversion tool |
Roadmap
- Daemon (ksecretsserviced)
- ksecrets specific file format storage [DONE]
- testing and bugfixing [IN PROGRESS]
- KDE API (ksecretsservice)
- support secret creation and retrieving [DONE]
- implement signals [TO BE DONE]
- Secrets Sync Tool (ksecretssync)
- Implement syncing protocol [TO BE DONE]
- Add IMAP support [TO BE DONE]
- Add SFTP support [TO BE DONE]
- ksecrets tool
- Specify commands to be added [TO BE DONE]
- Implement these commands [TO BE DONE]
- kio (used to display secrets in e.g. Dolphin)
- Finish it [TO BE DONE]
- KWallet conversion tool (kwl2kss)
- More testing [TO BE DONE]
Notes
Originally, this project was started as a freedesktop.org specification, that one could find here [[2]]. This specification is for a DBus daemon providing a means for applications to securely store and retrieve secrets information. Under KDE, this is considered an implementation detail and KDE applications are supposed to use the client API described above. However, this implementation detail is important to be known for those users mixing KDE and GNOME, as the freedesktop.org specification is also implemented by gnome-keyring. These user should make a choice about the actual daemon they want to activate and then stick with it, as no migration tool exists (yet) from ksecretsserviced to gnome-keyring or viceversa.