Voila!!! escaping the $ character worked!!! Thanks..
Regarding the other part..
when I add the hardware accelerator to my NSS database using modutil, and
list it, I get the following output.
# modutil -list -dbdir .
Listing of PKCS #11 Modules
-----------------------------------------------------------
1. NSS Internal PKCS #11 Module
slots: 2 slots attached
status: loaded
slot: NSS Internal Cryptographic Services
token: NSS Generic Crypto Services
slot: NSS User Private Key and Certificate Services
token: NSS Certificate DB
2. Sun Crypto Accelerator
library name: /usr/lib/libpkcs11.so
slots: 2 slots attached
status: loaded
slot: Sun Metaslot
token: Sun Metaslot
slot: Sun Crypto Softtoken
token: Sun Software PKCS#11 softtoken
I am confused why the slot "Sun Crypto Softtoken" is also being listed,
shouldn't it be the hardware accelerator slots that should be listed with
the Sun Metaslot?
any suggestions?
On Tue, Aug 25, 2009 at 3:27 PM, Vladimir Kotal <Vladimir.Kotal at
sun.com>wrote:
> Rishi Renjith wrote:
>
>> Hello, I have a hardware accelerator installed in my Solaris 10 x86
>> machine and would like to disable the Sun PKCS11 softtoken.
>>
>
> Firstly, could you elaborate on why you're trying to disable it ?
>
> <snip>
>
> *bash-3.00# cryptoadm disable
>> provider="/usr/lib/security/$ISA/pkcs11_softtoken_*
>> *extra.so"
>>
>
> This is Solaris 10 system (because of the _extra.so library) but I will
> answer this anyway since it is a generic question/issue.
>
> mechanism=CKM_RSA_PKCS,CKM_RSA_PKCS_KEY_PAIR_GEN,CKM_RSA_X_509,CKM_MD*
>> *5_RSA_PKCS*
>> *cryptoadm: /usr/lib/security//pkcs11_softtoken_extra.so does not exist.\*
>>
>
> Aah, you mean disable softtoken only for certain mechanisms.
>
> The shell interprets the dollar sign, so you have to escape it like this:
>
>
> cryptoadm disable \
> provider=/usr/lib/security/\$ISA/pkcs11_softtoken_extra.so \
>
>
> mechanism=CKM_RSA_PKCS,CKM_RSA_PKCS_KEY_PAIR_GEN,CKM_RSA_X_509,CKM_MD5_RSA_PKCS
>
>
> v.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://mail.opensolaris.org/pipermail/crypto-discuss/attachments/20090825/2f1aabd5/attachment.html>
