It seems that if the private key already exists, we modify its attributes: http://lxr.mozilla.org/security/source/security/nss/lib/softoken/sftkdb.c#848
Many PKCS #11 errors of the softoken are mapped to SEC_ERROR_BAD_DATA: http://lxr.mozilla.org/security/source/security/nss/lib/pk11wrap/pk11err.c#74 Dave, if you run your program in the debugger, you should be able to track this down in half an hour. Wan-Teh _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto