diff --git a/locales/.doctrees/environment.pickle b/locales/.doctrees/environment.pickle index 2d10a190cd..ab4cf085a8 100644 Binary files a/locales/.doctrees/environment.pickle and b/locales/.doctrees/environment.pickle differ diff --git a/locales/.doctrees/nethsm/pkcs11-setup.doctree b/locales/.doctrees/nethsm/pkcs11-setup.doctree index c54e16b624..bb7d127906 100644 Binary files a/locales/.doctrees/nethsm/pkcs11-setup.doctree and b/locales/.doctrees/nethsm/pkcs11-setup.doctree differ diff --git a/locales/bg/LC_MESSAGES/string.po b/locales/bg/LC_MESSAGES/string.po index fc4e024953..26d5218e58 100644 --- a/locales/bg/LC_MESSAGES/string.po +++ b/locales/bg/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: bg\n" @@ -9057,11 +9057,11 @@ msgstr "Конфигурацията е във формат yaml:" msgid "All platforms" msgstr "Всички платформи" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Инстанции" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -9071,7 +9071,7 @@ msgstr "" "екземпляри трябва да бъдат конфигурирани в клъстер. Удостоверенията на " "потребителите и ключовете трябва да са едни и същи за всички инстанции." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -9079,11 +9079,87 @@ msgstr "" "Модулът ще използва инстанциите по кръгов път, като при неуспех ще опита " "друга инстанция." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Метрики" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Потребители" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -9095,7 +9171,7 @@ msgstr "" " можете да конфигурирате модула само с потребител администратор, само с " "потребител оператор или и с двамата едновременно." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -9104,28 +9180,29 @@ msgstr "" "подразбиране и ще използва потребителя администратор само когато " "действието го изисква." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "Обикновеният потребител PKCS11 е съпоставен с оператора на NetHSM, а " "PKCS11 SO е съпоставен с администратора на NetHSM." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Пароли" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "Паролата може да бъде предоставена по няколко начина:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "В обикновен текст в конфигурацията ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -9133,7 +9210,7 @@ msgstr "" "В променлива на средата, прочетена от модула с префикс ``env:``: " "``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -9146,7 +9223,7 @@ msgstr "" "``pkcs11-tool --module libnethsm_pkcs11.so --login --login-type so --so-" "pin Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -9155,7 +9232,7 @@ msgstr "" "ще се изисква влизане в системата, за да се предостави паролата (3-ти " "метод)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/cs/LC_MESSAGES/string.po b/locales/cs/LC_MESSAGES/string.po index a37ba28d99..c57aace550 100644 --- a/locales/cs/LC_MESSAGES/string.po +++ b/locales/cs/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: cs\n" @@ -8873,11 +8873,11 @@ msgstr "Konfigurace je ve formátu yaml:" msgid "All platforms" msgstr "Všechny platformy" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Instance" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -8887,7 +8887,7 @@ msgstr "" "instance nakonfigurovány v clusteru. Pověření uživatelů a klíče musí být " "ve všech instancích stejné." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -8895,11 +8895,87 @@ msgstr "" "Modul bude instance používat obousměrně a v případě selhání jedné " "instance vyzkouší jinou." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Metriky" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Uživatelé" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -8911,7 +8987,7 @@ msgstr "" "nakonfigurovat pouze s uživatelem správce, pouze s uživatelem operátora " "nebo s oběma uživateli současně." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -8920,28 +8996,29 @@ msgstr "" "uživatele operátora a uživatele správce použije pouze tehdy, když to akce" " vyžaduje." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "Běžný uživatel PKCS11 je namapován na operátora NetHSM a PKCS11 SO je " "namapován na správce NetHSM." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Hesla" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "Heslo lze zadat více způsoby:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "V prostém textu v konfiguraci ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -8949,7 +9026,7 @@ msgstr "" "V proměnné prostředí načtené modulem s předponou ``env:``: " "``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -8962,7 +9039,7 @@ msgstr "" "--module libnethsm_pkcs11.so --login --login-type so --so-pin " "Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -8970,7 +9047,7 @@ msgstr "" "Pokud není heslo uživatele nastaveno v konfiguračním souboru, bude " "vyžadováno přihlášení za účelem zadání hesla (3. metoda)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/da/LC_MESSAGES/string.po b/locales/da/LC_MESSAGES/string.po index 5deb1ff21e..ed4c811c58 100644 --- a/locales/da/LC_MESSAGES/string.po +++ b/locales/da/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: da\n" @@ -8944,11 +8944,11 @@ msgstr "Konfigurationen er yaml-formateret:" msgid "All platforms" msgstr "Alle platforme" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Forekomster" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -8958,7 +8958,7 @@ msgstr "" "konfigureres i en klynge. Brugernes legitimationsoplysninger og nøglerne " "skal være de samme på alle instanser." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -8966,11 +8966,87 @@ msgstr "" "Modulet vil bruge instanserne på en round-robin måde og prøve en anden " "instans, hvis en fejler." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Metrics" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Brugere" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -8982,7 +9058,7 @@ msgstr "" "konfigurere modulet med kun en administratorbruger, kun en operatørbruger" " eller begge på samme tid." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -8991,28 +9067,29 @@ msgstr "" "operatøren og kun bruge administratorbrugeren, når handlingen har brug " "for det." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "Den almindelige PKCS11-bruger er mappet til NetHSM-operatøren, og PKCS11 " "SO er mappet til NetHSM-administratoren." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Adgangskoder" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "Adgangskoden kan angives på flere måder:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "I almindelig tekst i konfigurationen ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -9020,7 +9097,7 @@ msgstr "" "I en miljøvariabel læst af modulet med præfikset ``env:``: " "``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -9033,7 +9110,7 @@ msgstr "" "``pkcs11-tool --module libnethsm_pkcs11.so --login --login-type so --so-" "pin Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -9041,7 +9118,7 @@ msgstr "" "Hvis en brugers adgangskode ikke er angivet i konfigurationsfilen, kræves" " der et login for at angive adgangskoden (3. metode)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/de/LC_MESSAGES/string.po b/locales/de/LC_MESSAGES/string.po index 2c80e1d854..f849e852dc 100644 --- a/locales/de/LC_MESSAGES/string.po +++ b/locales/de/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: de\n" @@ -9159,11 +9159,11 @@ msgstr "Die Konfiguration ist yaml-formatiert:" msgid "All platforms" msgstr "Alle Plattformen" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Instanzen" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -9174,7 +9174,7 @@ msgstr "" "Anmeldeinformationen der Benutzer und die Schlüssel müssen auf allen " "Instanzen identisch sein." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -9182,11 +9182,87 @@ msgstr "" "Das Modul verwendet die Instanzen nach dem Round-Robin-Prinzip und " "versucht eine andere Instanz, wenn eine ausfällt." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Metriken" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Benutzer" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -9199,7 +9275,7 @@ msgstr "" "nur mit einem Bediener-Benutzer oder mit beiden gleichzeitig " "konfigurieren." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -9208,28 +9284,29 @@ msgstr "" "standardmäßig den Operator und nur dann den Administrator, wenn die " "Aktion dies erfordert." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "Der reguläre PKCS11-Benutzer wird dem NetHSM-Operator und der PKCS11-SO " "dem NetHSM-Administrator zugeordnet." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Passwörter" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "Das Passwort kann auf verschiedene Weise übermittelt werden:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "Im Klartext in der Konfiguration ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -9237,7 +9314,7 @@ msgstr "" "In einer Umgebungsvariablen, die von dem Modul mit dem Präfix ``env:`` " "gelesen wird: ``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -9250,7 +9327,7 @@ msgstr "" "``pkcs11-tool --module libnethsm_pkcs11.so --login --login-type so --so-" "pin Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -9259,7 +9336,7 @@ msgstr "" "festgelegt ist, ist eine Anmeldung erforderlich, um das Passwort " "einzugeben (3. Methode)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/el/LC_MESSAGES/string.po b/locales/el/LC_MESSAGES/string.po index e38db9c733..eded9fb193 100644 --- a/locales/el/LC_MESSAGES/string.po +++ b/locales/el/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: el\n" @@ -9208,11 +9208,11 @@ msgstr "Η διαμόρφωση είναι σε μορφή yaml:" msgid "All platforms" msgstr "Όλες οι πλατφόρμες" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Περιπτώσεις" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -9222,7 +9222,7 @@ msgstr "" "περιπτώσεις πρέπει να διαμορφωθούν σε συστάδα. Τα διαπιστευτήρια των " "χρηστών και τα κλειδιά πρέπει να είναι τα ίδια σε όλες τις περιπτώσεις." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -9230,11 +9230,87 @@ msgstr "" "Η ενότητα θα χρησιμοποιήσει τις περιπτώσεις με κυκλικό τρόπο, " "δοκιμάζοντας μια άλλη περίπτωση αν αποτύχει μία." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Μετρικές" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Χρήστες" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -9246,7 +9322,7 @@ msgstr "" "να μπορείτε να ρυθμίσετε τη μονάδα μόνο με χρήστη διαχειριστή, μόνο με " "χρήστη χειριστή ή και με τους δύο ταυτόχρονα." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -9255,28 +9331,29 @@ msgstr "" "προεπιλογή και θα χρησιμοποιεί τον χρήστη διαχειριστή μόνο όταν το " "χρειάζεται η ενέργεια." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "Ο κανονικός χρήστης PKCS11 αντιστοιχίζεται στον χειριστή του NetHSM και ο" " χρήστης PKCS11 SO αντιστοιχίζεται στον διαχειριστή του NetHSM." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Κωδικοί πρόσβασης" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "Ο κωδικός πρόσβασης μπορεί να παρέχεται με πολλαπλά μέσα:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "Σε απλό κείμενο στη ρύθμιση παραμέτρων ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -9284,7 +9361,7 @@ msgstr "" "Σε μια μεταβλητή περιβάλλοντος που διαβάζεται από την ενότητα με το " "πρόθεμα ``env:``: ``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -9297,7 +9374,7 @@ msgstr "" "``--so-pin``: ``pkcs11-tool --module libnethsm_pkcs11.so --login --login-" "type so --so-pin Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -9306,7 +9383,7 @@ msgstr "" "ρυθμίσεων, θα απαιτηθεί σύνδεση για την παροχή του κωδικού πρόσβασης (3η " "μέθοδος)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/es/LC_MESSAGES/string.po b/locales/es/LC_MESSAGES/string.po index 40734c92d8..26f72420a8 100644 --- a/locales/es/LC_MESSAGES/string.po +++ b/locales/es/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: es\n" @@ -9100,11 +9100,11 @@ msgstr "La configuración tiene formato yaml:" msgid "All platforms" msgstr "Todas las plataformas" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Instancias" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -9114,7 +9114,7 @@ msgstr "" "instancias deben configurarse en un clúster. Las credenciales de los " "usuarios y las claves deben ser las mismas en todas las instancias." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -9122,11 +9122,87 @@ msgstr "" "El módulo utilizará las instancias de forma rotatoria, probando con otra " "instancia si una falla." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Métrica" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Usuarios" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -9138,7 +9214,7 @@ msgstr "" " configurar el módulo sólo con un usuario administrador, sólo con un " "usuario operador o con ambos a la vez." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -9147,28 +9223,29 @@ msgstr "" "usuario operador y sólo utilizará el usuario administrador cuando la " "acción lo necesite." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "El usuario PKCS11 normal se asigna al operador de NetHSM y el SO PKCS11 " "se asigna al administrador de NetHSM." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Contraseñas" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "La contraseña puede facilitarse por múltiples medios:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "En texto plano en la configuración ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -9176,7 +9253,7 @@ msgstr "" "En una variable de entorno leída por el módulo con el prefijo ``env:``: " "``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -9189,7 +9266,7 @@ msgstr "" "pin`` en su lugar: ``pkcs11-tool --module libnethsm_pkcs11.so --login " "--login-type so --so-pin Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -9198,7 +9275,7 @@ msgstr "" "configuración, se requerirá un login para proporcionar la contraseña (3er" " método)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/et/LC_MESSAGES/string.po b/locales/et/LC_MESSAGES/string.po index 18d7227d68..8cfe68b0f2 100644 --- a/locales/et/LC_MESSAGES/string.po +++ b/locales/et/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: et\n" @@ -8861,11 +8861,11 @@ msgstr "Konfiguratsioon on yaml-formaadis:" msgid "All platforms" msgstr "Kõik platvormid" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Instants" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -8875,7 +8875,7 @@ msgstr "" " konfigureerida klastriks. Kasutajate volitused ja võtmed peavad olema " "kõigil instantsidel samad." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -8883,11 +8883,87 @@ msgstr "" "Moodul kasutab instantse kordamööda, proovides teist instantsi, kui üks " "neist ei toimi." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Mõõdikud" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Kasutajad" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -8899,7 +8975,7 @@ msgstr "" "nii, et saate moodulit konfigureerida ainult administraatori kasutajaga, " "ainult operaatori kasutajaga või mõlemaga korraga." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -8907,28 +8983,29 @@ msgstr "" "Kui kaks kasutajat on määratud, kasutab moodul vaikimisi operaatorit ja " "kasutab administraatori kasutajat ainult siis, kui tegevus seda vajab." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "Tavaline PKCS11 kasutaja on määratud NetHSMi operaatorile ja PKCS11 SO on" " määratud NetHSMi administraatorile." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Paroolid" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "Parooli saab esitada mitmel viisil:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "Lihtkirjas konfiguratsioonis ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -8936,7 +9013,7 @@ msgstr "" "Keskkonnamuutuja, mida loeb moodul eesliitega ``env:``: " "``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -8948,7 +9025,7 @@ msgstr "" " parooli andmiseks tuleb kasutada hoopis `` `: ``pkcs11-tool --module " "libnethsm_pkcs11.so --login --login-type so --so-pin Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -8956,7 +9033,7 @@ msgstr "" "Kui kasutaja salasõna ei ole konfiguratsioonifailis määratud, tuleb " "salasõna sisestada (3. meetod)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/fi/LC_MESSAGES/string.po b/locales/fi/LC_MESSAGES/string.po index f8a87ba66d..8f8a8dc161 100644 --- a/locales/fi/LC_MESSAGES/string.po +++ b/locales/fi/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: fi\n" @@ -8927,11 +8927,11 @@ msgstr "Konfiguraatio on yaml-muotoinen:" msgid "All platforms" msgstr "Kaikki alustat" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Instanssit" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -8941,7 +8941,7 @@ msgstr "" "instanssit on määritettävä klusteriksi. Käyttäjien tunnistetietojen ja " "avainten on oltava samat kaikissa instansseissa." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -8949,11 +8949,87 @@ msgstr "" "Moduuli käyttää instansseja vuorotellen ja kokeilee toista instanssia, " "jos yksi epäonnistuu." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Mittarit" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Käyttäjät" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -8965,7 +9041,7 @@ msgstr "" "määrittää moduulin vain järjestelmänvalvojan käyttäjäksi, vain " "operaattorikäyttäjäksi tai molemmille samanaikaisesti." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -8974,28 +9050,29 @@ msgstr "" "operaattoria ja käyttää ylläpitäjän käyttäjää vain silloin, kun toiminto " "sitä tarvitsee." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "Tavallinen PKCS11-käyttäjä on yhdistetty NetHSM-operaattoriin ja PKCS11 " "SO on yhdistetty NetHSM-ylläpitäjään." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Salasanat" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "Salasana voidaan antaa usealla eri tavalla:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "Selkokielellä kokoonpanossa ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -9003,7 +9080,7 @@ msgstr "" "Ympäristömuuttujassa, jonka moduuli lukee etuliitteellä ``env:``: " "``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -9016,7 +9093,7 @@ msgstr "" " ``pkcs11-tool --module libnethsm_pkcs11.so --login --login-type so --so-" "pin Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -9024,7 +9101,7 @@ msgstr "" "Jos käyttäjän salasanaa ei ole määritetty asetustiedostossa, salasanan " "antaminen edellyttää kirjautumista (3. menetelmä)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/fr/LC_MESSAGES/string.po b/locales/fr/LC_MESSAGES/string.po index 960ffce594..130456f6d4 100644 --- a/locales/fr/LC_MESSAGES/string.po +++ b/locales/fr/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: fr\n" @@ -9173,11 +9173,11 @@ msgstr "La configuration est formatée en yaml :" msgid "All platforms" msgstr "Toutes les plateformes" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Instances" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -9188,7 +9188,7 @@ msgstr "" " d'identification des utilisateurs et les clés doivent être identiques " "sur toutes les instances." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -9196,11 +9196,87 @@ msgstr "" "Le module utilisera les instances de manière rotative, en essayant une " "autre instance si l'une d'entre elles échoue." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Métriques" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Utilisateurs" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -9212,7 +9288,7 @@ msgstr "" "Vous pouvez ainsi configurer le module avec un seul utilisateur " "administrateur, un seul utilisateur opérateur ou les deux à la fois." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -9221,28 +9297,29 @@ msgstr "" " par défaut et n'utilise l'administrateur que lorsque l'action le " "nécessite." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "L'utilisateur PKCS11 normal est associé à l'opérateur NetHSM et l'OS " "PKCS11 est associé à l'administrateur NetHSM." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Mots de passe" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "Le mot de passe peut être fourni par plusieurs moyens :" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "En texte clair dans la configuration ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -9250,7 +9327,7 @@ msgstr "" "Dans une variable d'environnement lue par le module avec le préfixe " "``env:`` : ``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -9263,7 +9340,7 @@ msgstr "" "``pkcs11-tool --module libnethsm_pkcs11.so --login --login-type so --so-" "pin Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -9272,7 +9349,7 @@ msgstr "" "configuration, une connexion sera requise pour fournir le mot de passe " "(3ème méthode)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/hu/LC_MESSAGES/string.po b/locales/hu/LC_MESSAGES/string.po index 8584aad471..63a4b7dc24 100644 --- a/locales/hu/LC_MESSAGES/string.po +++ b/locales/hu/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: hu\n" @@ -9071,11 +9071,11 @@ msgstr "A konfiguráció yaml-formátumú:" msgid "All platforms" msgstr "Minden platform" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Instances" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -9085,7 +9085,7 @@ msgstr "" "példányokat fürtben kell konfigurálni. A felhasználók hitelesítő " "adatainak és a kulcsoknak minden példányban azonosnak kell lenniük." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -9093,11 +9093,87 @@ msgstr "" "A modul a példányokat körkörösen használja, és ha az egyik meghibásodik, " "egy másik példányt próbál meg." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Mérőszámok" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Felhasználók" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -9109,7 +9185,7 @@ msgstr "" " csak rendszergazdai, csak üzemeltetői vagy mindkettő felhasználóval " "egyszerre konfigurálhassa." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -9118,28 +9194,29 @@ msgstr "" "operátort használja, és csak akkor használja a rendszergazda " "felhasználót, ha a műveletnek szüksége van rá." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "A hagyományos PKCS11 felhasználó a NetHSM operátorhoz, a PKCS11 SO pedig " "a NetHSM rendszergazdához van hozzárendelve." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Jelszavak" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "A jelszó többféle módon is megadható:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "Egyszerű szövegben a konfigurációban ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -9147,7 +9224,7 @@ msgstr "" "A modul által a ``env:`` előtaggal olvasott környezeti változóban: " "``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -9160,7 +9237,7 @@ msgstr "" "használni: ``pkcs11-tool --module libnethsm_pkcs11.so --login --login-" "type so --so-pin Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -9168,7 +9245,7 @@ msgstr "" "Ha a felhasználó jelszava nincs megadva a konfigurációs fájlban, akkor a " "jelszó megadásához bejelentkezésre van szükség (3. módszer)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/it/LC_MESSAGES/string.po b/locales/it/LC_MESSAGES/string.po index 6a8e13fb31..2d90ee382e 100644 --- a/locales/it/LC_MESSAGES/string.po +++ b/locales/it/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: it\n" @@ -9057,11 +9057,11 @@ msgstr "La configurazione è formattata in yaml:" msgid "All platforms" msgstr "Tutte le piattaforme" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Istanze" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -9071,7 +9071,7 @@ msgstr "" "devono essere configurate in un cluster. Le credenziali degli utenti e le" " chiavi devono essere le stesse su tutte le istanze." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -9079,11 +9079,87 @@ msgstr "" "Il modulo utilizzerà le istanze in modo round-robin, provando un'altra " "istanza se una fallisce." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Metriche" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Utenti" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -9095,7 +9171,7 @@ msgstr "" "possibile configurare il modulo solo con un utente amministratore, solo " "con un utente operatore o con entrambi contemporaneamente." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -9104,28 +9180,29 @@ msgstr "" "impostazione predefinita e utilizzerà l'utente amministratore solo quando" " l'azione lo richiede." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "L'utente PKCS11 regolare è mappato sull'operatore NetHSM e l'SO PKCS11 è " "mappato sull'amministratore NetHSM." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Password" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "La password può essere fornita in diversi modi:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "In testo semplice nella configurazione ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -9133,7 +9210,7 @@ msgstr "" "In una variabile d'ambiente letta dal modulo con il prefisso ``env:``: " "``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -9146,7 +9223,7 @@ msgstr "" "``pkcs11-tool --module libnethsm_pkcs11.so --login --login-type so --so-" "pin Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -9154,7 +9231,7 @@ msgstr "" "Se la password di un utente non è impostata nel file di configurazione, " "verrà richiesto un login per fornire la password (terzo metodo)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/ja/LC_MESSAGES/string.po b/locales/ja/LC_MESSAGES/string.po index 3874a4409b..1c3729b1b5 100644 --- a/locales/ja/LC_MESSAGES/string.po +++ b/locales/ja/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: ja\n" @@ -8109,28 +8109,104 @@ msgstr "コンフィギュレーションはyamlフォーマットである：" msgid "All platforms" msgstr "すべてのプラットフォーム" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "インスタンス" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " "keys must be the same on all instances." msgstr "同じスロットに複数のNetHSMインスタンスが表示されている場合は、これらのインスタンスをクラスタに構成する必要があります。ユーザーとキーの認証情報は、すべてのインスタンスで同じでなければなりません。" -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." msgstr "モジュールはラウンドロビン方式でインスタンスを使用し、1つが失敗したら別のインスタンスを試す。" -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "指標" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "ユーザー" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -8138,38 +8214,39 @@ msgid "" "the same time." msgstr "オペレータと管理者ユーザはどちらも任意ですが、ユーザが設定されていない場合、モジュールは起動しません。これは、モジュールを管理者ユーザーだけ、オペレーターユーザーだけ、または両方を同時に設定できるようにするためです。" -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." msgstr "2人のユーザーが設定されると、モジュールはデフォルトでオペレータを使用し、アクションが必要なときだけ管理者ユーザーを使用します。" -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "通常のPKCS11ユーザーはNetHSMオペレータに、PKCS11 SOはNetHSM管理者にマッピングされます。" -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "パスワード" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "パスワードは複数の方法で提供することができる：" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "コンフィギュレーション``password: \"mypassword\"`` のプレーンテキストで。" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" msgstr "``env:`` のプレフィックスを持つモジュールが読み込む環境変数:``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -8181,13 +8258,13 @@ msgstr "" "を使用する必要があります：`pkcs11-tool --module libnethsm_pkcs11.so --login --login-" "type so --so-pin Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." msgstr "ユーザーのパスワードが設定ファイルに設定されていない場合、パスワードを入力するためにログインが要求されます（第3の方法）。" -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/lt/LC_MESSAGES/string.po b/locales/lt/LC_MESSAGES/string.po index 3d70c8abca..67f256483b 100644 --- a/locales/lt/LC_MESSAGES/string.po +++ b/locales/lt/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: lt\n" @@ -8980,11 +8980,11 @@ msgstr "Konfigūracija yra yaml formato:" msgid "All platforms" msgstr "Visos platformos" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Atvejai" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -8994,7 +8994,7 @@ msgstr "" "turi būti sukonfigūruoti kaip klasteris. Naudotojų įgaliojimai ir raktai " "turi būti vienodi visuose egzemplioriuose." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -9002,11 +9002,87 @@ msgstr "" "Modulis naudoja egzempliorius rato principu, o nepavykus vienam " "egzemplioriui, bando naudoti kitą egzempliorių." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Metrikos" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Vartotojai" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -9018,7 +9094,7 @@ msgstr "" "kad modulį galima konfigūruoti tik su administratoriaus naudotoju, tik su" " operatoriaus naudotoju arba su abiem vienu metu." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -9027,28 +9103,29 @@ msgstr "" "naudotoją, o administratoriaus naudotoją naudos tik tada, kai to reikės " "veiksmui atlikti." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "Įprastas PKCS11 naudotojas priskiriamas NetHSM operatoriui, o PKCS11 SO -" " NetHSM administratoriui." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Slaptažodžiai" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "Slaptažodį galima nurodyti keliais būdais:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "Paprastu tekstu konfigūracijoje ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -9056,7 +9133,7 @@ msgstr "" "Aplinkos kintamajame, kurį nuskaito modulis su priešdėliu ``env:``: " "``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -9069,7 +9146,7 @@ msgstr "" "``pkcs11-tool --module libnethsm_pkcs11.so --login --login-type so --so-" "pin Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -9077,7 +9154,7 @@ msgstr "" "Jei naudotojo slaptažodis nenustatytas konfigūracijos faile, " "slaptažodžiui nurodyti reikės prisijungti (3-iasis metodas)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/lv/LC_MESSAGES/string.po b/locales/lv/LC_MESSAGES/string.po index 803dd36099..2933d7a37d 100644 --- a/locales/lv/LC_MESSAGES/string.po +++ b/locales/lv/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: lv\n" @@ -8905,11 +8905,11 @@ msgstr "Konfigurācija ir yaml formātā:" msgid "All platforms" msgstr "Visas platformas" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Instances" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -8919,7 +8919,7 @@ msgstr "" "jākonfigurē klasterī. Lietotāju akreditācijas datiem un atslēgām jābūt " "vienādām visos gadījumos." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -8927,11 +8927,87 @@ msgstr "" "Modulis izmantos gadījumus pēc kārtas, izmēģinot citu gadījumu, ja viens " "gadījums neizdosies." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Metrikas" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Lietotāji" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -8943,7 +9019,7 @@ msgstr "" "varētu konfigurēt moduli tikai ar administratora lietotāju, tikai ar " "operatora lietotāju vai abiem vienlaicīgi." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -8952,28 +9028,29 @@ msgstr "" "operatoru un administratora lietotāju izmantos tikai tad, kad tas būs " "nepieciešams darbībai." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "Parastais PKCS11 lietotājs ir kartēts ar NetHSM operatoru, bet PKCS11 SO " "ir kartēts ar NetHSM administratoru." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Paroles" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "Paroli var ievadīt dažādos veidos:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "Vienkāršā tekstā konfigurācijā ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -8981,7 +9058,7 @@ msgstr "" "Vides mainīgajā, ko nolasa modulis ar prefiksu ``env:``: " "``env:ENV_STORING_THE_PASSWORD``." -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -8994,7 +9071,7 @@ msgstr "" "--module libnethsm_pkcs11.so --login --login-type so --so-pin " "Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -9002,7 +9079,7 @@ msgstr "" "Ja lietotāja parole nav iestatīta konfigurācijas failā, paroles " "ievadīšanai būs nepieciešams pieteikties (3. metode)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/nl/LC_MESSAGES/string.po b/locales/nl/LC_MESSAGES/string.po index 40d0760108..b24b2fc2bc 100644 --- a/locales/nl/LC_MESSAGES/string.po +++ b/locales/nl/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: nl\n" @@ -9053,11 +9053,11 @@ msgstr "De configuratie is yaml-geformatteerd:" msgid "All platforms" msgstr "Alle platforms" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Instanties" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -9067,7 +9067,7 @@ msgstr "" "instanties in een cluster worden geconfigureerd. De referenties van de " "gebruikers en de sleutels moeten hetzelfde zijn op alle instanties." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -9075,11 +9075,87 @@ msgstr "" "De module zal de instanties op een \"round-robin\" manier gebruiken, " "waarbij een andere instantie wordt geprobeerd als er één faalt." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Metriek" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Gebruikers" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -9091,7 +9167,7 @@ msgstr "" " zodat je de module kunt configureren met alleen een administrator " "gebruiker, alleen een operator gebruiker of beide tegelijk." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -9100,28 +9176,29 @@ msgstr "" "operator en alleen de administrator gebruiker als de actie dat nodig " "heeft." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "De gewone PKCS11-gebruiker wordt toegewezen aan de NetHSM-operator en de " "PKCS11 SO wordt toegewezen aan de NetHSM-beheerder." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Wachtwoorden" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "Het wachtwoord kan op verschillende manieren worden gegeven:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "In platte tekst in de configuratie ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -9129,7 +9206,7 @@ msgstr "" "In een omgevingsvariabele die wordt gelezen door de module met het " "voorvoegsel ``env:``: ``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -9142,7 +9219,7 @@ msgstr "" "gebruiken: ``pkcs11-tool --module libnethsm_pkcs11.so --login --login-" "type so --so-pin Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -9151,7 +9228,7 @@ msgstr "" "configuratiebestand, moet er worden ingelogd om het wachtwoord op te " "geven (3e methode)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/pl/LC_MESSAGES/string.po b/locales/pl/LC_MESSAGES/string.po index db6d874aaf..cbad8ca697 100644 --- a/locales/pl/LC_MESSAGES/string.po +++ b/locales/pl/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: pl\n" @@ -9019,11 +9019,11 @@ msgstr "Konfiguracja ma format yaml:" msgid "All platforms" msgstr "Wszystkie platformy" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Wystąpienia" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -9033,7 +9033,7 @@ msgstr "" "instancje te muszą być skonfigurowane w klastrze. Poświadczenia " "użytkowników i klucze muszą być takie same we wszystkich instancjach." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -9041,11 +9041,87 @@ msgstr "" "Moduł będzie korzystał z instancji w trybie round-robin, wypróbowując " "kolejną instancję, jeśli jedna zawiedzie." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Metryki" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Użytkownicy" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -9058,7 +9134,7 @@ msgstr "" "tylko z użytkownikiem operatora lub z obydwoma użytkownikami " "jednocześnie." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -9067,28 +9143,29 @@ msgstr "" "operatora i używał użytkownika administratora tylko wtedy, gdy akcja tego" " wymaga." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "Zwykły użytkownik PKCS11 jest mapowany na operatora NetHSM, a PKCS11 SO " "jest mapowany na administratora NetHSM." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Hasła" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "Hasło można podać na wiele sposobów:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "W postaci zwykłego tekstu w konfiguracji ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -9096,7 +9173,7 @@ msgstr "" "W zmiennej środowiskowej odczytywanej przez moduł z prefiksem ``env:``: " "``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -9108,7 +9185,7 @@ msgstr "" "administratora należy użyć ``--so-pin`` zamiast: ``pkcs11-tool --module " "libnethsm_pkcs11.so --login --login-type so --so-pin Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -9116,7 +9193,7 @@ msgstr "" "Jeśli hasło użytkownika nie jest ustawione w pliku konfiguracyjnym, " "wymagane będzie zalogowanie się w celu podania hasła (trzecia metoda)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/pt/LC_MESSAGES/string.po b/locales/pt/LC_MESSAGES/string.po index ff294ffd1a..39a651263d 100644 --- a/locales/pt/LC_MESSAGES/string.po +++ b/locales/pt/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-05-29 12:50+0000\n" "Last-Translator: Anonymous \n" "Language: pt\n" @@ -8670,29 +8670,105 @@ msgstr "" msgid "All platforms" msgstr "Todas as Plataformas" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " "keys must be the same on all instances." msgstr "" -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." msgstr "" -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Métricas" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 #, fuzzy msgid "Users" msgstr "Qubes" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -8700,39 +8776,39 @@ msgid "" "the same time." msgstr "" -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." msgstr "" -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 #, fuzzy msgid "Passwords" msgstr "Palavra-passe para a acção DKEK" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" msgstr "" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -8740,13 +8816,13 @@ msgid "" "libnethsm_pkcs11.so --login --login-type so --so-pin Administrator``" msgstr "" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." msgstr "" -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." @@ -34694,3 +34770,10 @@ msgstr "" #~ msgid "The import can be initiated as follows." #~ msgstr "A importação pode ser iniciada da seguinte forma." +#~ msgid "" +#~ "The regular PKCS11 user is mapped " +#~ "to the NetHSM operator and the " +#~ "PKCS11 SO is mapped to the NetHSM" +#~ " administrator." +#~ msgstr "" + diff --git a/locales/ro/LC_MESSAGES/string.po b/locales/ro/LC_MESSAGES/string.po index 1122d55b01..8ce68b572b 100644 --- a/locales/ro/LC_MESSAGES/string.po +++ b/locales/ro/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: ro\n" @@ -9087,11 +9087,11 @@ msgstr "Configurația este formatată în format yaml:" msgid "All platforms" msgstr "Toate platformele" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Instanțe" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -9102,7 +9102,7 @@ msgstr "" "identificare ale utilizatorilor și cheile trebuie să fie aceleași pe " "toate instanțele." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -9110,11 +9110,87 @@ msgstr "" "Modulul va utiliza instanțele în mod circular, încercând o altă instanță " "în cazul în care una dintre ele eșuează." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Metrici" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Utilizatori" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -9126,7 +9202,7 @@ msgstr "" " modulul doar cu un utilizator administrator, doar cu un utilizator " "operator sau cu ambii în același timp." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -9135,28 +9211,29 @@ msgstr "" "implicit utilizatorul operator și va folosi utilizatorul administrator " "numai atunci când acțiunea are nevoie de el." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "Utilizatorul PKCS11 obișnuit este atribuit operatorului NetHSM, iar SO " "PKCS11 este atribuit administratorului NetHSM." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Parole" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "Parola poate fi furnizată prin mai multe mijloace:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "În text simplu în configurația ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -9164,7 +9241,7 @@ msgstr "" "Într-o variabilă de mediu citită de modulul cu prefixul ``env:``: " "``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -9177,7 +9254,7 @@ msgstr "" "``--so-pin``: ``pkcs11-tool --module libnethsm_pkcs11.so --login --login-" "type so --so-pin Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -9186,7 +9263,7 @@ msgstr "" "configurare, va fi necesară o autentificare pentru a furniza parola (a " "treia metodă)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/ru/LC_MESSAGES/string.po b/locales/ru/LC_MESSAGES/string.po index 22a6992656..c65b4ab7cb 100644 --- a/locales/ru/LC_MESSAGES/string.po +++ b/locales/ru/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: ru\n" @@ -9029,11 +9029,11 @@ msgstr "Конфигурация имеет формат yaml:" msgid "All platforms" msgstr "Все платформы" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Экземпляры" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -9043,7 +9043,7 @@ msgstr "" "экземпляры должны быть сконфигурированы в кластер. Учетные данные " "пользователей и ключи должны быть одинаковыми на всех экземплярах." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -9051,11 +9051,87 @@ msgstr "" "Модуль будет использовать экземпляры по кругу, пробуя другой экземпляр, " "если один из них не работает." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Метрика" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Пользователи" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -9068,7 +9144,7 @@ msgstr "" "пользователем-администратором, только с пользователем-оператором или с " "обоими одновременно." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -9077,28 +9153,29 @@ msgstr "" "оператора, а пользователя-администратора - только тогда, когда это будет " "необходимо." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "Обычный пользователь PKCS11 сопоставляется с оператором NetHSM, а PKCS11 " "SO - с администратором NetHSM." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Пароли" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "Пароль может быть предоставлен несколькими способами:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "Открытым текстом в конфигурации ``password: \"mypassword\"``." -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -9106,7 +9183,7 @@ msgstr "" "В переменной окружения, читаемой модулем с префиксом ``env:``: " "``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -9119,7 +9196,7 @@ msgstr "" " --module libnethsm_pkcs11.so --login --login-type so --so-pin " "Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -9127,7 +9204,7 @@ msgstr "" "Если пароль пользователя не задан в конфигурационном файле, то для ввода " "пароля потребуется вход в систему (3-й способ)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/sk/LC_MESSAGES/string.po b/locales/sk/LC_MESSAGES/string.po index dc73773755..48746eb992 100644 --- a/locales/sk/LC_MESSAGES/string.po +++ b/locales/sk/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: sk\n" @@ -8899,11 +8899,11 @@ msgstr "Konfigurácia je vo formáte yaml:" msgid "All platforms" msgstr "Všetky platformy" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Inštancie" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -8913,7 +8913,7 @@ msgstr "" "musia byť nakonfigurované v klastri. Prihlasovacie údaje používateľov a " "kľúče musia byť na všetkých inštanciách rovnaké." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -8921,11 +8921,87 @@ msgstr "" "Modul bude používať inštancie okružným spôsobom, pričom v prípade " "zlyhania jednej inštancie vyskúša inú inštanciu." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Metriky" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Používatelia" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -8937,7 +9013,7 @@ msgstr "" "nakonfigurovať modul len s používateľom administrátora, len s " "používateľom operátora alebo s oboma súčasne." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -8946,28 +9022,29 @@ msgstr "" "používateľa operátora a používateľa správcu použije len vtedy, keď to " "akcia vyžaduje." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "Bežný používateľ PKCS11 je namapovaný na operátora NetHSM a PKCS11 SO je " "namapovaný na správcu NetHSM." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Heslá" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "Heslo možno zadať viacerými spôsobmi:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "V jednoduchom texte v konfigurácii ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -8975,7 +9052,7 @@ msgstr "" "V premennej prostredia načítanej modulom s prefixom ``env:``: " "``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -8988,7 +9065,7 @@ msgstr "" "``pkcs11-tool --module libnethsm_pkcs11.so --login --login-type so --so-" "pin Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -8996,7 +9073,7 @@ msgstr "" "Ak heslo používateľa nie je nastavené v konfiguračnom súbore, bude sa " "vyžadovať prihlásenie na zadanie hesla (3. metóda)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/sl/LC_MESSAGES/string.po b/locales/sl/LC_MESSAGES/string.po index 66d1e77577..df5377a14c 100644 --- a/locales/sl/LC_MESSAGES/string.po +++ b/locales/sl/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: sl\n" @@ -8899,11 +8899,11 @@ msgstr "Konfiguracija je oblikovana v formatu yaml:" msgid "All platforms" msgstr "Vse platforme" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Primerki" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -8913,7 +8913,7 @@ msgstr "" " konfigurirani v gruči. Pooblastila uporabnikov in ključi morajo biti " "enaki na vseh primerkih." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -8921,11 +8921,87 @@ msgstr "" "Modul bo instance uporabljal na krožni način, pri čemer bo v primeru " "neuspeha poskusil z drugo instanco." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Metrike" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Uporabniki" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -8937,7 +9013,7 @@ msgstr "" "konfigurirate samo z uporabnikom administratorjem, samo z uporabnikom " "operaterjem ali z obema hkrati." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -8946,28 +9022,29 @@ msgstr "" "operaterja in uporabnika administratorja uporabi le, kadar je to potrebno" " za akcijo." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "Običajni uporabnik PKCS11 je preslikan na operaterja NetHSM, uporabnik " "PKCS11 SO pa na administratorja NetHSM." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Gesla" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "Geslo lahko zagotovite na več načinov:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "V navadnem besedilu v konfiguraciji ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -8975,7 +9052,7 @@ msgstr "" "V spremenljivki okolja, ki jo prebere modul s predpono ``env:``: " "``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -8988,7 +9065,7 @@ msgstr "" "--module libnethsm_pkcs11.so --login --login-type so --so-pin " "Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -8996,7 +9073,7 @@ msgstr "" "Če geslo uporabnika ni nastavljeno v konfiguracijski datoteki, bo za vpis" " gesla potrebna prijava (3. metoda)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/string.pot b/locales/string.pot index 013dc06c37..d31d5bdca1 100644 --- a/locales/string.pot +++ b/locales/string.pot @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation \n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-16 15:08+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -6481,48 +6481,96 @@ msgid "The module will use the instances in a round-robin fashion, trying anothe msgstr "" #: ../nethsm/pkcs11-setup.rst:139 -msgid "Users" +msgid "Network reliability" msgstr "" #: ../nethsm/pkcs11-setup.rst:141 +msgid "To improve the reliability of the PKCS#11 module, it is possible to configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +msgid "Retries" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "If a NetHSM instance is unreachable, the PKCS#11 module is capable of retrying sending the request to other instances, or to the same instance (if other instances are also unreachable). It is possible to introduce a delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "Failing instances are marked as unreachable and retried in a background thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "If no background thread can be spawned (`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried during normal operations, slowing down the requests. To minimise this, such \"inline\" health checks are limited to 1 second timeouts, and only 3 health checks can be attempted per request (this is a worst case situation that can only be reached if a large number of instances failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "The maximum number of requests sent for one API call is: ``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "The maximum (worst case) duration before reaching the timeout for one API call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "The maximum timeout for one PKCS#11 function call will vary because some functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "To improve performance, connections are kept open with the NetHSM instances to avoid the need for re-opening them. It is possible that in a network with a firewall, these idle connection could be closed, leading to the next connection attempt to timeout. To prevent slow timeouts from happening, and to detect earlier if it does, it is possible to configure TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 +msgid "Users" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:168 msgid "The operator and administrator users are both optional but the module won't start if no user is configured. This is so you can configure the module with only an administrator user, only an operator user or both at the same time." msgstr "" -#: ../nethsm/pkcs11-setup.rst:143 +#: ../nethsm/pkcs11-setup.rst:170 msgid "When the two users are set the module will use the operator by default and only use the administrator user when the action needs it." msgstr "" -#: ../nethsm/pkcs11-setup.rst:145 -msgid "The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 SO is mapped to the NetHSM administrator." +#: ../nethsm/pkcs11-setup.rst:172 +msgid "The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11 SO is mapped to the NetHSM administrator." msgstr "" -#: ../nethsm/pkcs11-setup.rst:148 +#: ../nethsm/pkcs11-setup.rst:175 #: ../software/nk-app2/passwords.rst:2 #: ../nitrokey3/shared/reset.rst.inc:17 msgid "Passwords" msgstr "" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "" -#: ../nethsm/pkcs11-setup.rst:152 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "" -#: ../nethsm/pkcs11-setup.rst:153 +#: ../nethsm/pkcs11-setup.rst:180 msgid "In an environment variable read by the module with the ``env:`` prefix: ``env:ENV_STORING_THE_PASSWORD``" msgstr "" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:181 msgid "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool --module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin password you need to use ``--so-pin`` instead: ``pkcs11-tool --module libnethsm_pkcs11.so --login --login-type so --so-pin Administrator``" msgstr "" -#: ../nethsm/pkcs11-setup.rst:157 +#: ../nethsm/pkcs11-setup.rst:184 msgid "If the password of an user is not set in the configuration file a login will be required to provide the password (3rd method)." msgstr "" -#: ../nethsm/pkcs11-setup.rst:159 +#: ../nethsm/pkcs11-setup.rst:186 msgid "A NetHSM that is not operational is considered as a slot with the token not present." msgstr "" diff --git a/locales/sv/LC_MESSAGES/string.po b/locales/sv/LC_MESSAGES/string.po index ed4567dcb4..87e151980f 100644 --- a/locales/sv/LC_MESSAGES/string.po +++ b/locales/sv/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: sv\n" @@ -8909,11 +8909,11 @@ msgstr "Konfigurationen är yaml-formaterad:" msgid "All platforms" msgstr "Alla plattformar" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "Instanser" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " @@ -8923,7 +8923,7 @@ msgstr "" "konfigureras i ett kluster. Användarnas autentiseringsuppgifter och " "nycklarna måste vara desamma på alla instanser." -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." @@ -8931,11 +8931,87 @@ msgstr "" "Modulen kommer att använda instanserna i ett round-robin-förfarande och " "prova en annan instans om en misslyckas." -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "Mätvärden" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "Användare" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -8947,7 +9023,7 @@ msgstr "" "konfigurera modulen med endast en administratörsanvändare, endast en " "operatörsanvändare eller båda samtidigt." -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." @@ -8956,28 +9032,29 @@ msgstr "" "som standard och endast använda administratörsanvändaren när åtgärden " "kräver det." -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "" "Den vanliga PKCS11-användaren är mappad till NetHSM-operatören och PKCS11" " SO är mappad till NetHSM-administratören." -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "Lösenord" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "Lösenordet kan anges på flera olika sätt:" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "I klartext i konfigurationen ``password: \"mypassword\"``" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" @@ -8985,7 +9062,7 @@ msgstr "" "I en miljövariabel som läses av modulen med prefixet ``env:``: " "``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -8998,7 +9075,7 @@ msgstr "" "--module libnethsm_pkcs11.so --login --login-type so --so-pin " "Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." @@ -9006,7 +9083,7 @@ msgstr "" "Om lösenordet för en användare inte har angetts i konfigurationsfilen " "krävs en inloggning för att ange lösenordet (3:e metoden)." -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present." diff --git a/locales/zh_CN/LC_MESSAGES/string.po b/locales/zh_CN/LC_MESSAGES/string.po index 66d684b352..e8114d7072 100644 --- a/locales/zh_CN/LC_MESSAGES/string.po +++ b/locales/zh_CN/LC_MESSAGES/string.po @@ -8,7 +8,7 @@ msgid "" msgstr "" "Project-Id-Version: Nitrokey Documentation\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-09-12 09:00+0200\n" +"POT-Creation-Date: 2024-09-19 11:48+0200\n" "PO-Revision-Date: 2024-09-04 13:51+0000\n" "Last-Translator: Anonymous \n" "Language: zh_CN\n" @@ -7833,28 +7833,104 @@ msgstr "配置采用 yaml 格式：" msgid "All platforms" msgstr "所有平台" -#: ../nethsm/pkcs11-setup.rst:128 +#: ../nethsm/pkcs11-setup.rst:131 msgid "Instances" msgstr "实例" -#: ../nethsm/pkcs11-setup.rst:130 +#: ../nethsm/pkcs11-setup.rst:133 msgid "" "If multiple NetHSM instances are listed in the same slot, these instances" " must be configured in a cluster. The credentials of the users and the " "keys must be the same on all instances." msgstr "如果同一插槽中列出多个 NetHSM 实例，则必须将这些实例配置为一个群集。所有实例上的用户证书和密钥必须相同。" -#: ../nethsm/pkcs11-setup.rst:132 +#: ../nethsm/pkcs11-setup.rst:135 msgid "" "The module will use the instances in a round-robin fashion, trying " "another instance if one fails." msgstr "模块将以循环方式使用实例，如果一个实例失败，就会尝试另一个实例。" -#: ../nethsm/pkcs11-setup.rst:136 +#: ../nethsm/pkcs11-setup.rst:139 +msgid "Network reliability" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:141 +msgid "" +"To improve the reliability of the PKCS#11 module, it is possible to " +"configure timeouts, retries, instance redundancy and TCP keepalives." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:144 +#, fuzzy +msgid "Retries" +msgstr "度量衡" + +#: ../nethsm/pkcs11-setup.rst:146 +msgid "" +"If a NetHSM instance is unreachable, the PKCS#11 module is capable of " +"retrying sending the request to other instances, or to the same instance " +"(if other instances are also unreachable). It is possible to introduce a " +"delay between retries." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:149 +msgid "" +"Failing instances are marked as unreachable and retried in a background " +"thread, so they won't be tried unless all instances are unreachable" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:150 +msgid "" +"If no background thread can be spawned " +"(`CKF_LIBRARY_CANT_CREATE_OS_THREADS`), failed instances will be tried " +"during normal operations, slowing down the requests. To minimise this, " +"such \"inline\" health checks are limited to 1 second timeouts, and only " +"3 health checks can be attempted per request (this is a worst case " +"situation that can only be reached if a large number of instances " +"failed)." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:152 +msgid "Therefore:" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:154 +msgid "" +"The maximum number of requests sent for one API call is: " +"``retries.count`` + 1 + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:155 +msgid "" +"The maximum (worst case) duration before reaching the timeout for one API" +" call is: (``retries.count`` + 1) * ``timeout_seconds`` + 3" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:156 +msgid "" +"The maximum timeout for one PKCS#11 function call will vary because some " +"functions will lead to multiple API calls in the NetHSM." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:159 +msgid "TCP keepalive" +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:161 +msgid "" +"To improve performance, connections are kept open with the NetHSM " +"instances to avoid the need for re-opening them. It is possible that in a" +" network with a firewall, these idle connection could be closed, leading " +"to the next connection attempt to timeout. To prevent slow timeouts from " +"happening, and to detect earlier if it does, it is possible to configure " +"TCP keepalives for these." +msgstr "" + +#: ../nethsm/pkcs11-setup.rst:166 msgid "Users" msgstr "用户" -#: ../nethsm/pkcs11-setup.rst:138 +#: ../nethsm/pkcs11-setup.rst:168 msgid "" "The operator and administrator users are both optional but the module " "won't start if no user is configured. This is so you can configure the " @@ -7862,38 +7938,39 @@ msgid "" "the same time." msgstr "操作员和管理员用户都是可选的，但如果没有配置用户，模块将无法启动。因此，您可以只配置管理员用户、操作员用户或同时配置这两个用户。" -#: ../nethsm/pkcs11-setup.rst:140 +#: ../nethsm/pkcs11-setup.rst:170 msgid "" "When the two users are set the module will use the operator by default " "and only use the administrator user when the action needs it." msgstr "设置两个用户后，模块将默认使用操作员用户，只有在操作需要时才使用管理员用户。" -#: ../nethsm/pkcs11-setup.rst:142 +#: ../nethsm/pkcs11-setup.rst:172 +#, fuzzy msgid "" -"The regular PKCS11 user is mapped to the NetHSM operator and the PKCS11 " -"SO is mapped to the NetHSM administrator." +"The regular PKCS#11 user is mapped to the NetHSM operator and the PKCS#11" +" SO is mapped to the NetHSM administrator." msgstr "常规 PKCS11 用户映射为 NetHSM 操作员，PKCS11 SO 映射为 NetHSM 管理员。" -#: ../nethsm/pkcs11-setup.rst:145 ../nitrokey3/shared/reset.rst.inc:17 +#: ../nethsm/pkcs11-setup.rst:175 ../nitrokey3/shared/reset.rst.inc:17 #: ../software/nk-app2/passwords.rst:2 msgid "Passwords" msgstr "密码" -#: ../nethsm/pkcs11-setup.rst:147 +#: ../nethsm/pkcs11-setup.rst:177 msgid "The password can be provided by multiple means:" msgstr "密码可以通过多种方式提供：" -#: ../nethsm/pkcs11-setup.rst:149 +#: ../nethsm/pkcs11-setup.rst:179 msgid "In plain text in the configuration ``password: \"mypassword\"``" msgstr "在配置``password: \"mypassword\"`` 中以纯文本形式出现。" -#: ../nethsm/pkcs11-setup.rst:150 +#: ../nethsm/pkcs11-setup.rst:180 msgid "" "In an environment variable read by the module with the ``env:`` prefix: " "``env:ENV_STORING_THE_PASSWORD``" msgstr "在模块读取的环境变量中，以``env:`` 为前缀：``env:ENV_STORING_THE_PASSWORD``" -#: ../nethsm/pkcs11-setup.rst:151 +#: ../nethsm/pkcs11-setup.rst:181 msgid "" "Via the login function of pkcs11, example for pcks11-tool: ``pkcs11-tool " "--module libnethsm_pkcs11.so -p opPassphrase`` To provide the the admin " @@ -7905,13 +7982,13 @@ msgstr "" "代替：``pkcs11-tool --module libnethsm_pkcs11.so --login --login-type so " "--so-pin Administrator``" -#: ../nethsm/pkcs11-setup.rst:154 +#: ../nethsm/pkcs11-setup.rst:184 msgid "" "If the password of an user is not set in the configuration file a login " "will be required to provide the password (3rd method)." msgstr "如果配置文件中未设置用户密码，则需要登录以提供密码（第 3 种方法）。" -#: ../nethsm/pkcs11-setup.rst:156 +#: ../nethsm/pkcs11-setup.rst:186 msgid "" "A NetHSM that is not operational is considered as a slot with the token " "not present."