fix: remove unused variables

Signed-off-by: Marcelo Cerri <mhcerri@linux.vnet.ibm.com>
Reviewed-by: Joy Latten
fix: add missing checks in icsf.c

Signed-off-by: Marcelo Cerri <mhcerri@linux.vnet.ibm.com>
Reviewed-by: Joy Latten
icsf: add functions to wrap and unwrap keys

Signed-off-by: Marcelo Cerri <mhcerri@linux.vnet.ibm.com>
Reviewed-by: Joy Latten
new_host.c: fix indentation for SC_WrapKey() and SC_UnwrapKey()

Signed-off-by: Marcelo Cerri <mhcerri@linux.vnet.ibm.com>
Reviewed-by: Joy Latten
token-specific functions for key wrapping

Add the new token-specific functions t_wrap_key and t_unwrap_key.

Signed-off-by: Marcelo Cerri <mhcerri@linux.vnet.ibm.com>
Reviewed-by: Joy Latten
icsf: add support for key wrapping

Signed-off-by: Marcelo Cerri <mhcerri@linux.vnet.ibm.com>
Reviewed-by: Joy Latten
test: fix key wrapping test case

Wrapped key length should only be provided as an attribute when using
the CKM_RSA_X_509 mechanism. CKM_RSA_PKCS holds the key length in the
wrapped data and providing it as an attribute causes ICSF to return an
error.

Also, this commit fixes how information about wrong key length values
are shown.

Signed-off-by: Marcelo Cerri <mhcerri@linux.vnet.ibm.com>
Reviewed-by: Joy Latten
icsf: add support for SASL authentication

ICSF tokens can be configured using certificates to authenticate using
SASL. The certificates used are the LDAP default ones. And they can be
defined per user using the file $HOME/.ldaprc. The contents of this file
should be similar to the following example:

TLS_KEY     /path/to/client.key
TLS_CERT    /path/to/client.crt
TLS_CACERT  /path/to/ca.crt

Signed-off-by: Marcelo Cerri <mhcerri@linux.vnet.ibm.com>
Reviewed-by: Joy Latten