Uploaded image for project: 'Support'
  1. Support
  2. SUPPORT-178

Allow to set CKF_REMOVABLE_DEVICE flag on a slot

    XMLWordPrintable

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Minor
    • Resolution: Duplicate
    • Affects Version/s: SoftHSM 2.0.0
    • Fix Version/s: None
    • Component/s: PKCS#11 Interface
    • Labels:
      None

      Description

      I would like to use SoftHSM for the automatic testing of the SSSD Smartcard authentication feature. We use the CKF_REMOVABLE_DEVICE flag to filter the available slots to make it easier to identify a suitable slot for authentication.

      The flags are currently hardcoded to CKF_TOKEN_PRESENT in Slot::getSlotInfo() and we have a special code in SSSD which detects if the PKCS#11 module is softhsm2 and drops the CKF_REMOVABLE_DEVICE check in this case.

      It would be nice if softhsm2-util would offer a --slot-flags (or similar) option which would allow to set CKF_REMOVABLE_DEVICE on a given slot and store it together with the other slot specific data like PIN and SO-PIN.

        Attachments

          Activity

            People

            Assignee:
            rickard Rickard Bellgrim
            Reporter:
            sbose Sumit Bose
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: