Michiel van Meersbergen wrote:

> Another 'oddity' I should mention, is that the PKCS#11 DLL which provides
> access to the appropriate certificates and keys will ask for the proper
> authentication itself - in other words, when a private-key function like
> 'decrypt', 'sign' or 'unwrap' is called, it checks if authentication is
> needed, and asks for a password (via a message box). So I never need to
> provide any password-callbacks, do I?

If your PKS#11 module does its own user authentication, it should tell
the appliations that use it that it does so, by setting the
CKF_PROTECTED_AUTHENTICATION_PATH flag in the token info flags.

-- 
Nelson B
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to