[Opendnssec-develop] Refactoring of libhsm

Jakob Schlyter jakob at kirei.se
Mon Aug 15 08:30:57 UTC 2011


On 15 aug 2011, at 10:04, Rickard Bellgrim wrote:

> The key algorithm is not known in the libhsm key structure. It is
> looked up by calling hsm_get_key_algorithm(). Should we add a call to
> it hsm_key_new_privkey_object_handle() and store it in the key
> structure? The only downside is that it is called for each key pair
> when listing keys in the HSM, but that is an operation that the user
> does and not OpenDNSSEC. Thus not affecting the signing performance.

yes, it makes sense to know what algorithm the key is.

but hsm_key_info_t contains this, no? would it make sense to have such a struct in hsm_key_t ?

	jakob




More information about the Opendnssec-develop mailing list