[xmlsec] Re: get PKCS11 slot

Wed, 18 Jun 2003 09:43:30 -0700

--------------010105010500010807040205
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

AFAIK, there is no such functionality in NSS.
You can only GET slot for crypto operation XXX, not SET.

You can implement SET functionality in the application space
as you had outlined... Note that if you try to use a slot
that is not the "best slot" for an op, the op might fail - so
the app better know what it is doing....

-Tej

Aleksey Sanin wrote:

> BTW, can't you set "default slot for crypto operation XXX" in NSS 
> configuration?
>
> Aleksey
>
> Tejkumar Arora wrote:
>
>> Andrew,
>>
>> Do you have a real use-case where you want to use a specific slot
>> for encryption instead of the "best slot"?.
>> The slot choice is made for several operations (key generation,
>> signature ops, hashing, macing etc....), and there should be
>> a good reason if you want the slot override feature....
>>
>> -Tej
>>
> _______________________________________________ xmlsec mailing list 
> xmlsec@aleksey.com http://www.aleksey.com/mailman/listinfo/xmlsec 

--------------010105010500010807040205
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <title></title>
</head>
<body>
AFAIK, there is no such functionality in NSS.<br>
You can only GET slot for crypto operation XXX, not SET.<br>
<br>
You can implement SET functionality in the application space<br>
as you had outlined... Note that if you try to use a slot<br>
that is not the "best slot" for an op, the op might fail - so<br>
the app better know what it is doing....<br>
<br>
-Tej<br>
<br>
Aleksey Sanin wrote:<br>
<blockquote type="cite" cite="mid3EF09145.8080902@aleksey.com">     
  <meta http-equiv="Content-Type"
 content="text/html;charset=ISO-8859-15">
  <title></title>
     BTW, can't you set "default slot for crypto operation XXX" in NSS configuration?
  <br>
 <br>
 Aleksey<br>
 <br>
 Tejkumar Arora wrote:<br>

  <blockquote type="cite" cite="mid3EF08F07.6040103@netscape.com">Andrew,
    <br>
   <br>
 Do you have a real use-case where you want to use a specific slot <br>
 for encryption instead of the "best slot"?. <br>
 The slot choice is made for several operations (key generation, <br>
 signature ops, hashing, macing etc....), and there should be <br>
 a good reason if you want the slot override feature.... <br>
   <br>
 -Tej <br>
   <br>
 </blockquote>
 _______________________________________________ xmlsec mailing list <a class="moz-txt-link-abbreviated" href="mailto:xmlsec@aleksey.com">xmlsec@aleksey.com</a> 
<a class="moz-txt-link-freetext" href="http://www.aleksey.com/mailman/listinfo/xmlsec">http://www.aleksey.com/mailman/listinfo/xmlsec</a> </blockquote>
<br>
</body>
</html>

--------------010105010500010807040205--