[Pki-devel] request for review - patch for Bug 820695 - Tracker - TPS (ECC with nethsm) configuration failed at key generation

[John Magne]

ACK:

Good addition to try different flags for our supported hsm.s

Should probably remove the check for $hw="" when trying the vanilla flags first.
Might as well just let it go and try them.

----- Original Message -----
From: "Christina Fu" <cfu at redhat.com>
To: pki-devel at redhat.com
Sent: Tuesday, August 21, 2012 6:38:35 PM
Subject: Re: [Pki-devel] request for review - patch for Bug 820695 - Tracker - TPS (ECC with nethsm) configuration failed at key generation

new patch to review.  It now loops through a few known crypto token's 
required option combos.

https://bugzilla.redhat.com/attachment.cgi?id=606088&action=diff&context=patch&collapsed=&headers=1&format=raw

please review,
thanks,
Christina

On 08/16/2012 09:10 PM, Christina Fu wrote:
> Please review the following patch:
> https://bugzilla.redhat.com/attachment.cgi?id=605068&action=diff&context=patch&collapsed=&headers=1&format=raw 
>
>
> This patch allows ECC keys to be generated on certain HSM's.
>
>  It requires
>
> the new (working) fix from
> https://bugzilla.redhat.com/show_bug.cgi?id=820684
> certutil support for EC on HSMs - need to call 
> PK11_GenerateKeyPairWithOpFlags()
>
> The official fix for 820684 is in process.  I have tested this patch 
> against a preliminary developer build.
>
> thanks,
> Christina
>
> _______________________________________________
> Pki-devel mailing list
> Pki-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-devel

_______________________________________________
Pki-devel mailing list
Pki-devel at redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel