On Wed, 10 Nov 2010 15:09:03 -0200
Klaus Heinrich Kiwi <[email protected]> wrote:

>    OpenCryptoki is not correctly derivating CKA_MODULUS_BITS when
>    creating an object with C_ObjectCreate(). This value must be
>    derivated from CKA_MODULUS which is a required attribute for
>    C_ObjectCreate() when dealing with RSA Public Keys.
> 
>    The most obvios symptom is a CKR_FUNCTION_FAILED for the
>    C_VerifyRecover() function when using NSS to create a
>    self-signed certificate (NSS tries to import the public
>    key into a session object using C_ObjectCreate())
> 
> Signed-off-by: Klaus Heinrich Kiwi <[email protected]>
> ---
>  usr/lib/pkcs11/common/h_extern.h |    3 ++-
>  usr/lib/pkcs11/common/key.c      |   11 +++++++++--
>  usr/lib/pkcs11/common/object.c   |    9 +++++----
>  usr/lib/pkcs11/common/template.c |    5 ++++-
>  4 files changed, 20 insertions(+), 8 deletions(-)

Applied.

-- 
Klaus Heinrich Kiwi | [email protected] | http://blog.klauskiwi.com
Open Source Security blog :     http://www.ratliff.net/blog
IBM Linux Technology Center :   http://www.ibm.com/linux/ltc

------------------------------------------------------------------------------
Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!
Tap into the largest installed PC base & get more eyes on your game by
optimizing for Intel(R) Graphics Technology. Get started today with the
Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.
http://p.sf.net/sfu/intelisp-dev2dev
_______________________________________________
Opencryptoki-tech mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/opencryptoki-tech

Reply via email to