On Mon, Jul 7, 2008 at 4:26 AM, 133mmx <[EMAIL PROTECTED]> wrote:
> Hi all;
> I am implementing pkcs#11 dll for a smart card. Currently i am testing
> secure connection(https). I have succedded with internet explorer; but
> I have problems with firefox. Firefox uses class types and template
> type like below constants that I don't have any information about
> them. Is there any documentation that explains these contants. Also I
> am suspicious that something went wrong, then firefox begin to use
> these specific types to work around.
>
> Thanks for all replies.
>
> 70      #define CKO_NSS (CKO_VENDOR_DEFINED|NSSCK_VENDOR_NSS)
> 71
> 72      #define CKO_NSS_CRL                (CKO_NSS + 1)
> 73      #define CKO_NSS_SMIME              (CKO_NSS + 2)
> 74      #define CKO_NSS_TRUST              (CKO_NSS + 3)
> 75      #define CKO_NSS_BUILTIN_ROOT_LIST  (CKO_NSS + 4)
> 76      #define CKO_NSS_NEWSLOT            (CKO_NSS + 5)
> 77      #define CKO_NSS_DELSLOT            (CKO_NSS + 6)
> 78
> 79
> 80      /*
> 81       * NSS-defined key types
> 82       *
> 83       */
> 84      #define CKK_NSS (CKK_VENDOR_DEFINED|NSSCK_VENDOR_NSS)
> 85
> 86      #define CKK_NSS_PKCS8              (CKK_NSS + 1)
> 87      /*
> 88       * NSS-defined certificate types
> 89       *
> 90       */
> 91      #define CKC_NSS (CKC_VENDOR_DEFINED|NSSCK_VENDOR_NSS)

As Nelson said, if Firefox/NSS passes any of these NSS vendor-specific
constants to your PKCS #11 DLL, you should return the appropriate error
code (which I think is CKR_ATTRIBUTE_TYPE_INVALID or
CKR_ATTRIBUTE_VALUE_INVALID, see page 64 and page 137 of
PKCS #11 v2.20).  Your PKCS #11 DLL doesn't need to support these
vendor-specific constants.

Wan-Teh
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to