Re: RFC7512 PKCS#11 URI support

2016-04-06 Thread Julien Pierre
David, On 4/6/2016 05:57, David Woodhouse wrote: I also want to mention that there are some fairly major deficiencies in NSS when it comes to finding certificates. The nickname only represents a subject. It does not uniquely identify a certificate. Even token:nickname - which is really

Re: RFC7512 PKCS#11 URI support

2016-04-06 Thread David Woodhouse
On Tue, 2016-04-05 at 17:27 -0700, Julien Pierre wrote: > The API itself may not have been documented, but products using the API  > have documented this token:nickname usage. That is the case for some  > Oracle server products. Now, I can't say that we really envisioned  > anyone entering a URI