Permalink
Browse files

Do not use CKA_SIGN or CKA_VERIFy

These are not supported by OpenSC for some cards
  • Loading branch information...
1 parent 8d56a31 commit f52c7f6a5d38f5bec250183335ed10a4746c19e7 @cmouse cmouse committed with cmouse Mar 29, 2015
Showing with 2 additions and 2 deletions.
  1. +2 −2 pdns/pkcs11signers.cc
@@ -305,7 +305,7 @@ class Pkcs11Token {
std::vector<P11KitAttribute> attr;
std::vector<CK_OBJECT_HANDLE> key;
attr.push_back(P11KitAttribute(CKA_CLASS, (unsigned long)CKO_PRIVATE_KEY));
- attr.push_back(P11KitAttribute(CKA_SIGN, (char)CK_TRUE));
+// attr.push_back(P11KitAttribute(CKA_SIGN, (char)CK_TRUE));
attr.push_back(P11KitAttribute(CKA_LABEL, d_label));
FindObjects2(attr, key, 1);
if (key.size() == 0) {
@@ -315,7 +315,7 @@ class Pkcs11Token {
d_private_key = key[0];
attr.clear();
attr.push_back(P11KitAttribute(CKA_CLASS, (unsigned long)CKO_PUBLIC_KEY));
- attr.push_back(P11KitAttribute(CKA_VERIFY, (char)CK_TRUE));
+// attr.push_back(P11KitAttribute(CKA_VERIFY, (char)CK_TRUE));
attr.push_back(P11KitAttribute(CKA_LABEL, d_label));
FindObjects2(attr, key, 1);
if (key.size() == 0) {

0 comments on commit f52c7f6

Please sign in to comment.