> Hi All, > > I am seeing openssl PKCS#11 engine code. I have some doubts regarding this. > > 1) Why are we passing NULL argument to C_Initialize. If the NULL argument is > passed, we are not supposed to access to use PKCS11 library from multiple thr > eads simultaneously. > > 2) How is opensc PKCS#11 engine different from openssl PKCS#11 engine?
The opensc engine only supported keys in the HSM but was not useful for general acceleration. The reverse was true for the openssl PKCS#11 engine. I've fixes for pkcs11_engine-0.9.8e.patch.2007-10-02 which make complete the changes in 2007-10-02 to do both. The current code tries to retrieve too much from the HSM and fails. Mark > Thanks in advance > Durga Prasad > > > This message posted from opensolaris.org > _______________________________________________ > security-discuss mailing list > security-discuss at opensolaris.org -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews at isc.org