[Opendnssec-develop] CKA_SENSITIVE and CKA_EXTRACTABLE

[Roland van Rijswijk]

Hi Jelte,

Yes, the other way around makes more sense :-)

Cheers,

Roland

Jelte Jansen wrote:
> 
> Hi,
> 
> for the key generation in libhsm, i more or less copied the templates in
> hsm-toolkit. These had CKA_SENSITIVE=false and CKA_EXTRACTABLE=true.
> 
> However, as Rickard pointed out to me, these should probably be the
> other way around. I think he's right, but just wanted to conform this
> with the list.
> 
> Any objections?
> 
> Jelte
> _______________________________________________
> Opendnssec-develop mailing list
> Opendnssec-develop at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop


-- 

-- Roland M. van Rijswijk
-- SURFnet Middleware Services
-- t: +31-30-2305388
-- e: roland.vanrijswijk at surfnet.nl