On Mon, 2 Mar 2020 17:16:09 +0800 Alvin Chen <sonoma...@gmail.com> wrote: > You can use an alternative header like p11-kit which is licensed under > a more liberal license. I had a look at the PKCS #11 headers; the biggest problem is that NSS uses version 3.00 while the p11-kit headers have been forked at 2.40 and not (yet?) updated, so a few structs and #defines are missing.
There's also a minor issue with CK_GCM_PARAMS, which used to have the wrong layout due to a documentation/header mismatch. NSS has two candidates of that struct, CK_GCM_PARAMS_V3 and CK_NSS_PARAMS, and selects one of those in pkcs11n.h depending on the NSS_PKCS11_2_0_COMPAT macro. I might be looking into this a bit more and see if I can fix the p11-kit headers, if the Mozilla team agrees that this is a viable way to resolve this bug. Cheers Timo
signature.asc
Description: OpenPGP digital signature
