.TH SECURITY-LOGIN 2.SH NAMElogin \- verify credentials.SH SYNOPSIS.EXinclude "keyring.m";include "security.m";login := load Login Login->PATH; login: fn(name, password, addr: string):	(string, ref Keyring->Authinfo);.EE.SH DESCRIPTIONThe.BR Loginmodule is provided for use by a client ofa certifying authority (CA) or `signer'.The.B loginfunction communicateswith a certifying authority (CA)in order to create a.B Keyring->Authinfoadtwhich contains a public/private key pair and a certificatesigned by the CA(see.IR keyring-intro (2)).The public/private key pair is generated by.B loginusing the same parameters as those in the signer's key(eg, algorithm and key length);see.IR keyring-gensk (2).The procedure assumes a secret, i.e. apassword, has already been establishedbetween the user and the CA.See.IR changelogin (8)and.IR keyfs (4)for how this password is managed at theCA..PP.B Loginconnects, using.IR sys-dial (2),to the signer at network address.IR addr ,which is any form accepted by.IR cs (8),including the special address.BR $SIGNER ,which.IR cswill translate to the client's default signer (if there is one).Normally the incoming call will be given to.IR logind (8)by.IR svc (8)..PP.B Loginsends the user.I nameand.IR password ,using the protocol described in.IR login (6),to justify the server'sissuing a certificate, which is returned in a.B Keyring->Authinfoadt on success.The certificate can if desired be stored by.BR Keyring->writeauthinfo ;see.IR keyring-auth (2).The password is used by the encryptedkey exchange protocol to establisha secure channel between user and CA..SH SOURCE.B /appl/lib/login.b.SH SEE ALSO.IR getauthinfo (8),.IR keyring-auth (2),.IR login (6),.IR createsignerkey (8),.IR logind (8).SH DIAGNOSTICS.B Loginreturns nil in the string componenton success and a diagnostic string on error (with a nil.B Keyring->Authinforeference).