OpenSolaris

Printable Version Enter a New Search
Bug ID 6744761
Synopsis pktool could do a better job of storing the CKA_ID (for pkcs#11 tokens)
State 1-Dispatched (Default State)
Category:Subcategory solaris-crypto:key_mgmt_tools
Keywords
Reported Against
Duplicate Of
Introduced In
Commit to Fix
Fixed In
Release Fixed
Related Bugs
Submit Date 4-September-2008
Last Update Date 4-September-2008
Description
When searching a pkcs#11 token store pkinit expects that the CKA_ID of a private key will match that of a certificate. If pktool is used to store previously generated certificates and private keys it will store the private keys with no CKA_ID. The certificates are stored with a correct CKA_ID.

I've attached a mail conversation with Wyllys which should help to explain the situation better.
Work Around
N/A
Comments
N/A