I have a problem where my PKCS11 module does not feel like decrypting
email...
as the C_Unwrap does not get called...

slot flags are CKF_REMOVABLE_DEVICE | CKF_HW_SLOT | CKF_TOKEN_PRESENT;
session state CKS_RO_PUBLIC_SESSION
mechanism CKM_RSA_PKCS

I have a template where the private key is set
CKA_ID=CertID;
CKA_CLASS=CKO_PRIVATE_KEY;
CKA_UNWRAP=1;
CKA_KEY_TYPE=CKK_RSA;
CKA_TOKEN=1;
CKA_PRIVATE=1;
CKA_SENSITIVE=1;
CKA_ALWAYS_SENSITIVE=1;
CKA_MODULUS=KeyModulus;
CKA_PUBLIC_EXPONENT=DEFAULT_PUB_EXPONENT; //why set public exponent and not
private?!
CKA_SIGN=1;
CKA_NEVER_EXTRACTABLE=1;
CKA_EXTRACTABLE=0;

I dont understand what is wrong here that the C_Unwrap does not get called.
Are there any other special requirements for it??

Thanks



Reply via email to