[prev in list] [next in list] [prev in thread] [next in thread] 

List:       strongswan-users
Subject:    Re: [strongSwan] [PATCH] support loading of NSS's libsoftkn3 as
From:       Andreas Steffen <andreas.steffen () strongswan ! org>
Date:       2007-07-03 11:22:30
Message-ID: 468A3176.2050806 () strongswan ! org
[Download RAW message or body]

[Attachment #2 (multipart/signed)]


Hi Robert,

your patch is in the trunk :-)

Thanks for your contribution

Andreas

Robert Varga wrote:
> Hi,
> 
> NSS library contains libsoftokn3.so, which exports PKCS#11-like
> interface. This is not fully PKCS#11-compliant, because it needs the
> pReserved field in CK_C_INITIALIZE_ARGS structure be set to a string
> containg instance configuration. In the current PKCS#11 standard (2.20)
> this field is required to be NULL.
> 
> Attached patch adds a new keyword 'pkcs11initargs', which takes a string
> argument. This argument (if present) is passed on to C_Initialize(),
> allowing strongSwan to use the softoken. Example configuration would
> look like:
> 
> config setup
> pkcs11module="/usr/lib64/libsoftokn3.so"
> pkcs11initargs="configdir='/etc/nss/softokn/' certPrefix='' keyPrefix='' \
> secmod='secmod.db' flags=readOnly" 
> Please consider applying.
> 

======================================================================
Andreas Steffen                         andreas.steffen@strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==


["smime.p7s" (application/x-pkcs7-signature)]

_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users


[prev in list] [next in list] [prev in thread] [next in thread]