For a test suite I'm importing a PKCS#12 cert into a fresh database as
follows:
rm -rf nssdb
echo foobar > nssdb.pw
${CERTUTIL} -d nssdb -N -f nssdb.pw
${PK12UTIL} -d nssdb -K foobar -W '' -i unclient.p12
and then using that database with the softokn PKCS#11 module.
With NSS 3.11, doing a FindObjects search for an object in this database
with a CKA_CLASS of CKO_CERTIFICATE would return one object, which would
have a CKA_CERTIFICATE_TYPE of CKC_X_509. This matched how other
hardware tokens would work.
With NSS 3.12, I'm seeing that the certificate type of the single object
with class of CKO_CERTIFICATE has changed to CKC_X_509_ATTR_CERT. Is
this expected behaviour?
Regards,
joe
_______________________________________________
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto
