On 05/24/2010 10:18 AM, Alon Bar-Lev wrote:
> Yes, good catch.
> But I don't know any application that actually uses this attribute... :)
>   
NSS does.
S/Mime would break if this were wrong. (you wouldn't be able to find the
correct cert that was used to encrypt the message, so you couldn't be
able to find the key).

bob
> On Mon, May 24, 2010 at 8:05 PM, Viktor TARASOV
> <viktor.tara...@opentrust.com> wrote:
>   
>> Hello,
>>
>> according to PKCS#11 specification the CKA_SERIAL_NUMBER is DER-encoded
>> value.
>>
>> Actually OpenSC PKCS#11 module returns a non-encoded octet string as a
>> value of this attribute.
>>
>> Should it be changed?
>>
>> Kind wishes,
>> Viktor.
>>
>> --
>> Viktor Tarasov  <viktor.tara...@opentrust.com>
>>
>> _______________________________________________
>> opensc-devel mailing list
>> opensc-devel@lists.opensc-project.org
>> http://www.opensc-project.org/mailman/listinfo/opensc-devel
>>
>>     
> _______________________________________________
> opensc-devel mailing list
> opensc-devel@lists.opensc-project.org
> http://www.opensc-project.org/mailman/listinfo/opensc-devel


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to