When using PK11_FindCertFromNickname() with the softokn it seems that using a raw nickname works fine (e.g. Server-Cert vs NSS Certificate DB:Server-Cert).
Looking for a nickname on a PKCS#11 token seems to require the token name in the nickname, "tokenname:Server-Cert". Is it safe to assume that if the slot isn't the internal slot to just prefix the nickname with the token to call PK11_FindCertFromNickname()? rob -- dev-tech-crypto mailing list [email protected] https://lists.mozilla.org/listinfo/dev-tech-crypto

