Skip to content

Conversation

@dengert
Copy link
Member

@dengert dengert commented Nov 2, 2023

Fixes #2920 Needs test using NSS

NSS use template with CKO_CLASS = CKO_PROFILE and CKA_TOKEN = CK_TRUE to find profiles.
pkcs15_framwork.c now responds withy CKA_TOKEN = CK_TRUE.
Previously would return CKR_ATTRIBUTE_TYPE_INVALID

Date: Thu Nov 2 09:00:17 2023 -0500
On branch pkcs11-profile-fix
Changes to be committed:
modified: framework-pkcs15.c

Checklist
  • PKCS#11 module is tested

@dengert dengert mentioned this pull request Nov 2, 2023
3 tasks
@Jakuje
Copy link
Member

Jakuje commented Nov 7, 2023

Discussed briefly with Bob about the NSS implementation and really the consensus should be that this is the right solution. If we do not provide the CKA_TOKEN=CK_TRUE, the specification defaults to FALSE, which means that the object is session-only, which really does not make much sense.

Would be glad for comments on #2928 which is related to the fix already verified in #2920.

 Date:      Thu Nov 2 09:00:17 2023 -0500
 On branch pkcs11-profile-fix
 Changes to be committed:
	modified:   framework-pkcs15.c
@Jakuje
Copy link
Member

Jakuje commented Nov 16, 2023

Thank you! Lets get this merged.

@Jakuje Jakuje merged commit 1e625a3 into OpenSC:master Nov 16, 2023
@dengert dengert deleted the pkcs11-profile-fix branch November 17, 2023 15:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants