On Tue, 18 May 2010 12:19:57 +0200
Dan Horák <[email protected]> wrote:

> Dan Horák píše v Út 18. 05. 2010 v 11:32 +0200: 
> > The option -M is show in the summary of available options even when
> > opencprytoki is built without the SHM defined.  
> 
> I am not sure whether this the best way how to deal with the
> inconsistency of available command line options when built
> with/without SHM defined. But at least I tried :-)
> 


Dan,

 thanks for the patches. Ack for the 1/3 and 2/3, but I'll delay 3/3
 for now.

 The SHM #define seems to be a troubleshooting option to the pkcsconf
 build that has been disabled forever. I'd like to either keep it,
 clean it up and enable it, or get rid of it altogether.

 Theoretically, the pkcsconf binary relies only on PKCS#11 API calls to
 do it's stuff, so placing a shmat() would tie it to
 opencryptoki and pkcsslotd being running.

 But again, this is always true for the cases where pkcsconf is used
 with the opencryptoki API, since C_Initialize() uses shmat() and
 requires pkcsslotd to be running.

 So it's rather a question of enabling the feature and tying pkcsconf
 to opencryptoki, or disabling and let it (possibly) work with other
 pkcs#11 implementations (do we really care?).

 -Klaus

-- 
Klaus Heinrich Kiwi | [email protected] | http://blog.klauskiwi.com
Open Source Security blog :     http://www.ratliff.net/blog
IBM Linux Technology Center :   http://www.ibm.com/linux/ltc

------------------------------------------------------------------------------

_______________________________________________
Opencryptoki-tech mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/opencryptoki-tech

Reply via email to