Proposal of interface to select the APQNs on YaST based on the configured master keys.
This adapts the interface to support both EP11 and CCA and, in the latter case, to select between AES DATA and AES CIPHER.
One important change (compared to the current YaST UI), is that APQNs without a valid current AES or P11 master key are not even considered.
Adding master key selection, EP11 cards and key types results in many, many possible combinations. Let's try to describe how the new UI works in all those cases. The screens are displayed as 80x24 text mode.
Once pervasive encryption is chosen, there is nothing else to decide. The only configured APQN will be used and nothing is shown in the UI
Similar to the previous one, but with a selection for the key type.
Scenario 3. There are several EP11 APQNs configured, every one with its own key (N keys, N EP11 APQNs)
The user can select the master key, which is equivalent to selecting the APQN. Note the full key is printed for verification (64 characters are too much for a reasonable combobox).
Similar to the previous one but including the key type selection.
Scenario 5. There are several EP11 APQNs configured, all of them with the same key (1 key, N EP11 APQNs)
The master key is irrelevant (nothing to choose in that regard). The user can decide which one of the configured APQNs to use.
Scenario 6. There are several CCA APQNs configured, all of them with the same key (1 key, N CCA APQNs)
Similar to the previous one but including the key type selection.
The user can select which master key to use (which is equivalent to select the APQN). If a CCA APQN (AES key) is chosen, an option appears to select the key type. If a EP11 APQN (P11 key) is chosen, the full key is printed.
Scenario 8. There are several APQNs configured, some of them with one key and others with several keys (N keys, M APQNs)
This is the most complex scenario and the UI combines the previous options.
Comment to upload the pictures