ACK: Good addition to try different flags for our supported hsm.s Should probably remove the check for $hw="" when trying the vanilla flags first. Might as well just let it go and try them. ----- Original Message ----- From: "Christina Fu" <cfu@redhat.com> To: pki-devel@redhat.com Sent: Tuesday, August 21, 2012 6:38:35 PM Subject: Re: [Pki-devel] request for review - patch for Bug 820695 - Tracker - TPS (ECC with nethsm) configuration failed at key generation new patch to review. It now loops through a few known crypto token's required option combos. https://bugzilla.redhat.com/attachment.cgi?id=606088&action=diff&context=patch&collapsed=&headers=1&format=raw please review, thanks, Christina On 08/16/2012 09:10 PM, Christina Fu wrote:

Please review the following patch: https://bugzilla.redhat.com/attachment.cgi?id=605068&action=diff&context=patch&collapsed=&headers=1&format=raw

This patch allows ECC keys to be generated on certain HSM's.

It requires

the new (working) fix from https://bugzilla.redhat.com/show_bug.cgi?id=820684 certutil support for EC on HSMs - need to call PK11_GenerateKeyPairWithOpFlags()

The official fix for 820684 is in process. I have tested this patch against a preliminary developer build.

thanks, Christina

_______________________________________________ Pki-devel mailing list Pki-devel@redhat.com https://www.redhat.com/mailman/listinfo/pki-devel

_______________________________________________ Pki-devel mailing list Pki-devel@redhat.com https://www.redhat.com/mailman/listinfo/pki-devel