Hi! I am using libp11-0.2.2 with eTokens (via etpkcs11).
Unfortunately, current version of libp11 does not allow me to store private keys (as well as public keys and certs) to the token permanently. The problem is in functions pkcs11_store_private_key(), pkcs11_store_public_key(), PKCS11_store_certificate() - they do not set boolean CKA_TOKEN attribute on objects (chapter 10.4 of PKCS#11 standard). So I made the patch (see attachment). Also I slightly unified storing interface, allowing client to specify "key id" in call to PKCS11_store_private_key(), as it was with PKCS11_store_certificate(). IMHO storing keys without "id" is almost useless when you are using engine_pkcs11. May I hope to see these changes in the source trunk (http://www.opensc-project.org/svn/libp11/trunk/src/ ) ?
libp11.patch
Description: Binary data
_______________________________________________ opensc-devel mailing list [email protected] http://www.opensc-project.org/mailman/listinfo/opensc-devel
