Le jeudi 04 novembre 2010 à 18:37 +0100, Nikos Mavrogiannopoulos a
écrit :
>  I'm trying to destroy an object I created on a Feitian PKI smart card
> using pkcs11 calls. My result is CKR_GENERAL_ERROR. I can reproduce it
> using the pkcs11-tool: 

On the Feitian PKI and most smartcards, objects cannot be deleted, per
spec. This is a security feature, to make sure objects are not replaced
by attackers. The same applies for RSA keys. 

The only way to replace objects/certs is to initialize the card and copy
them to card.

Kind regards,
-- 
                  Jean-Michel Pouré - Gooze - http://www.gooze.eu

_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to