On 09/02/08, Darren J Moffat wrote: > Raymond Xiong wrote: > > Hi > > > > Can anyone tell me why the attached test program failed with > > CKR_ATTRIBUTE_VALUE_INVALID error? Is CKO_DATA supported? > > No it doesn't, adding it is covered in 4983618 and 6235351 for the > related change to pktool(1). > > > What I am trying to do is to generate a lot of wrapped keys on > > one machine, save them in softtoken keystore, and then transfer > > the keystore to another machine(probably having different > > architecture) and retrieve those wrapped keys. I want to save > > those wrapped keys as CKO_DATA objects, but it seems that object > > type is not supported? Do I have to use regular files for this? > > That seems a strange thing to do with wrapped keys since the point of > wrapped keys is usually to get the *out* of the token. If you are > transferring the keystore why not just transfer it with the keys as they > keystore stores them (which is actually in a wrapped form anyway). >
Darren, Thanks for your answer. I need to do that for testing purpose. I will use regular files. Raymond
