ACK:
Good addition to try different flags for our supported hsm.s
Should probably remove the check for $hw="" when trying the vanilla flags
first.
Might as well just let it go and try them.
----- Original Message -----
From: "Christina Fu" <cfu(a)redhat.com>
To: pki-devel(a)redhat.com
Sent: Tuesday, August 21, 2012 6:38:35 PM
Subject: Re: [Pki-devel] request for review - patch for Bug 820695 - Tracker - TPS (ECC
with nethsm) configuration failed at key generation
new patch to review. It now loops through a few known crypto token's
required option combos.
https://bugzilla.redhat.com/attachment.cgi?id=606088&action=diff&...
please review,
thanks,
Christina
On 08/16/2012 09:10 PM, Christina Fu wrote:
Please review the following patch:
https://bugzilla.redhat.com/attachment.cgi?id=605068&action=diff&...
This patch allows ECC keys to be generated on certain HSM's.
It requires
the new (working) fix from
https://bugzilla.redhat.com/show_bug.cgi?id=820684
certutil support for EC on HSMs - need to call
PK11_GenerateKeyPairWithOpFlags()
The official fix for 820684 is in process. I have tested this patch
against a preliminary developer build.
thanks,
Christina
_______________________________________________
Pki-devel mailing list
Pki-devel(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel
_______________________________________________
Pki-devel mailing list
Pki-devel(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel