Please review the following patch:
https://bugzilla.redhat.com/attachment.cgi?id=605068&action=diff&...
This patch allows ECC keys to be generated on certain HSM's.
It requires
the new (working) fix from
https://bugzilla.redhat.com/show_bug.cgi?id=820684
certutil support for EC on HSMs - need to call PK11_GenerateKeyPairWithOpFlags()
The official fix for 820684 is in process. I have tested this patch against a preliminary
developer build.
thanks,
Christina