On 11/04/2010 09:46 PM, Nikos Mavrogiannopoulos wrote:

>>> I'm trying to destroy an object I created on a Feitian PKI smart
>>> card using pkcs11 calls. My result is CKR_GENERAL_ERROR. I can
>>> reproduce it using the pkcs11-tool:
>> On the Feitian PKI and most smartcards, objects cannot be deleted,
>> per spec. This is a security feature, to make sure objects are not
>> replaced by attackers. The same applies for RSA keys.
> Thanks, nice to know. So I suppose the only way to delete (using PKCS
> #11) is by using C_InitToken instead...

And as it seems this command returns unsupported feature. It would be
nice to be able to delete objects created with PKCS #11 via PKCS #11 itself.

regards,
Nikos
_______________________________________________
opensc-devel mailing list
[email protected]
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to