Raymond Xiong wrote: > Hi > > Can anyone tell me why the attached test program failed with > CKR_ATTRIBUTE_VALUE_INVALID error? Is CKO_DATA supported?
No it doesn't, adding it is covered in 4983618 and 6235351 for the related change to pktool(1). > What I am trying to do is to generate a lot of wrapped keys on > one machine, save them in softtoken keystore, and then transfer > the keystore to another machine(probably having different > architecture) and retrieve those wrapped keys. I want to save > those wrapped keys as CKO_DATA objects, but it seems that object > type is not supported? Do I have to use regular files for this? That seems a strange thing to do with wrapped keys since the point of wrapped keys is usually to get the *out* of the token. If you are transferring the keystore why not just transfer it with the keys as they keystore stores them (which is actually in a wrapped form anyway). -- Darren J Moffat
