Hello, On May 17, 2011, at 16:35 , Alon Bar-Lev wrote: > This will break many of people's usages. > Until now it was assumed that if --module is not specified the opensc > provider is loaded. > And as pkcs11-tool is part of opensc, I know many who did not specify this. > I know that something was broken recently with finding the default > module, however, do you really want to change existing behavior?
Yes, it will break some usages, maybe some scripts. Many people use the tool with modules other than OpenSC as well. The module to load was hard-coded to "opensc-pkcs11.so/.dll". There have been reports where people mix pre-packaged versions with self-compiled versions, load /usr/(local/)lib/opensc-pkcs11.so to Firefox and get different results when using /usr/(local/)bin/pkcs11-tool -L. PKCS#11 is implemented as a loadable module, which most other software require you to specify with a full path, explicitly. For generic education I think it is good for the future to make users realize what is going on rather than postpone reliance on "magic loading". This is similar to the "use slot with ID 0/1/X by default" in the context of PKCS#11. Cheers, Martin -- @MartinPaljak.net +3725156495 _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
