Christoph Brueckner wrote:
hi,At this time softoken is still tied to NSS. It requires an initialization string to be passed to C_Initialize. If you can make your other applicaitons pass that string, you might be able to use it. You may also have to use NSPR in your application for certain things like locking, as softoken uses NSPR.
NSS is using the softoken as internal pkcs#11 module.
Is it possible to turn the softoken into a real "standalone" pkcs#11 module, which can be
used by other applications beside Netscape/Mozilla?
What is this cryptoki framework (ckfw) all about? Is it possible to integrate the softoken into the ckfw, or does the softoken largly depend on NSPR and other netscape stuff?
Does someone actually integrated the softoken into the ckfw
to build a standalone pkcs#11 softoken?
Is there any documentation for the softoken and
the ckfw. Unfortunatly i didnt find any :-(
Its hard to understand ckfw and softoken without any diagramms
or documentations.
best regards
Christoph Brueckner
CKFW is a cryptoki framework. Its purpose is to provide a template for a PKCS#11 module implementation. It contains sample code for all PKCS#11 functions. It speeds up writing a PKCS#11 module by making it possible to write only a little bit of code for the PKCS#11 functions that are of interest to your module, while using the sample implementations for the rest. CKFW is used as the basis for the root certificate module, for example. It is also used in other products that ship their own PKCS#11 modules, such as Netscape Enterprise Server 6.1.
softoken was written separately and isn't based on ckfw. Since it implements nearly all functions in the specification, making softoken use CKFW wouldn't make sense.
