Listing 1. Creating a keyring file.
清单1.keyring文件的创建。
Create the default keyring for QMA.
为QMA创建一个默认的密匙环。
KEYCTL_LINK links a key into a keyring.
KEYCTL_LINK将一个密钥链接到一个keyring。
There are two defined key types: keyring and user.
有两种预定义的密钥类型：keyring和user。
Second script: Adding certificates to the keyring
第二个脚本：将证书添加到密匙环
Delete the default ca certificates from the keyring.
从这个密匙环删除默认ca证书。
Create the keyring and remove the default CA entries.
创建密匙环并删除默认的ca条目。
The request_key syscall searches a process keyring for a key.
request_key系统调用搜索一个进程keyring，寻找一个密钥。
KEYCTL_UNLINK unlinks a key or keyring from another keyring.
KEYCTL_UNLINK将密钥或keyring与另一个keyring的链接取消。
Read allows the possessor to read the key and lists the key for a keyring.
Read允许权限持有者读取密钥并列出keyring的密钥。
To authenticate servers to clients, you need to create a keyring and certificates.
要从服务器对客户端进行身份验证，需要创建一个keyring和证书。
Create a keyring in RACF database called ringcicsb, using the commands in Listing 6.
使用清单6中的命令，在名为ringcicsb的RACF数据库中创建keyring。
When you update the default keyring, you can take steps to prevent these warnings.
当您更新缺省的keyring时，您可以采取措施来阻止这些警告。
Create the certificates and add them to the keyring, using the commands in Listing 7.
使用清单7中的命令创建证书并将其添加到keyring中。
Type: The Linux key retention service defines two standard key types: user and keyring.
类型（Type）：Linux密钥保留服务定义两个标准密钥类型：user和keyring。
Here, you reuse the previous values for the keyring, certificate label, and password.
这里，您对密匙环、证书标签和密码重用了之前的值。
This is the keyring used by WebSEAL to store acceptable ca certificates for SSL junctions.
这是WebSEAL用来为SSL连接存储可接受的ca证书的密钥环。
Before running any commands though, you need to tell the script the name of the keyring file.
然而在运行任何命令之前，您必须告知脚本密匙环文件的名称。
The password to the keyring is stored in the script as a user-editable environment variable.
密匙环的密码作为一个用户可编辑的环境变量存储在脚本中。
The label must be unique within a keyring and it is set when a certificate is created or imported.
这个标签在一个密匙环内必须是惟一的，它在证书创建或导入时设置。
After we have created and instantiated the session keyring, we create the key for the user's session.
在创建并实例化会话keyring之后，为用户的会话创建密钥。
Login processes such as PAM will bind to the user-default session keyring until another session is created.
登录进程(比如pam)将绑定到用户默认的会话keyring，直到创建另一个会话为止。
The next step is to generate the keyring in its default state. This requires a single gsk7capicmd command invocation
下一步是生成默认状态的密匙环，这需要一个单一gsk7capicmd命令调用
As with the first script, the contents of the keyring are displayed to verify the operation has completed successfully.
和第一个脚本一样，密匙环的内容被显示出来以确认操作已经成功完成。
The design was such that the first script can be reused on any queue manager to create the keyring for the first time.
设计思想如下：第一个脚本可以在任何队列管理器上重用以初次创建密匙环。
You need to display the certificates in the keyring and ask the operator to check that no default ca certificates remain.
您需要显示密匙环中的证书并要求操作员确定没有默认的ca证书保留下来。
A "bash" shell is then returned to the user with the new session keyring and the key of a new type linked to the keyring.
然后，一个“bash”shell返回给用户，它带有新的会话keyring和链接到这个keyring的新类型的密钥。
The better the diagnostics, the less chance of the operator missing an error message and continuing with a broken keyring.
诊断性能越好，操作员错过一条错误信息并继续使用一个错误的密匙环的机会就越少。
When the kernel module receives an ioctl request, it first, creates a session keyring, by calling key_alloc to allocate a new key.
当内核模块收到ioctl请求时，它首先调用key_alloc来分配一个新的密钥，从而创建一个会话keyring。
The fourth type, a user-specific session keyring, is not searched directly but it is normally linked to from a session-specific keyring.
第四种类型（用户特有的会话keyring）不被直接搜索，但是，它通常会链接到一个会话特有的keyring。
应用推荐