[Opendnssec-develop] CKA_SENSITIVE and CKA_EXTRACTABLE

Roy Arends roy at nominet.org.uk
Tue May 26 10:02:10 UTC 2009

Jelte Jansen wrote on 05/26/2009 11:43:04 AM:

> Hi,
> for the key generation in libhsm, i more or less copied the templates in 

> hsm-toolkit. These had CKA_SENSITIVE=false and CKA_EXTRACTABLE=true.
> However, as Rickard pointed out to me, these should probably be the 
other way 
> around. I think he's right, but just wanted to conform this with the 
> Any objections?

No objections.


More information about the Opendnssec-develop mailing list