You've already forked opencryptoki
mirror of
https://github.com/opencryptoki/opencryptoki.git
synced 2026-10-24 05:39:17 +03:00
The PKCS#11 standard requires the CKA_ALWAYS_AUTHENTICATE attribute to be present in private key objects. Actually this attribute is not set as one of the default attributes. Further, it will be rejected when it's declared within the application defined key template. This fix will add the CKA_ALWAYS_AUTHENTICATE attribute by default to any private key object. The value is set to 'false'. The calling application is free to overrule by setting the attribute value within the key template to 'true'. Signed-off-by: Ingo Tuchscherer <ingo.tuchscherer@linux.vnet.ibm.com>