Re: [Opensc-devel] PKCS#11 Test suite (PIV)

[Thomas C. <cal...@gm...>]

Hi David,

You are correct opkcs11-tool does not currently support RFC7512, I'll give
it a look.
Should be easy enough to add.

That being said, opkcs11-tool was developed to allow fine-grained token
management and crypto operations using the CLI, not primarily to leverage
system-wide configuration using p11-kit.
Of course, being an open source project, contributions that can speed up
this feature are welcome :-)

Cheers,

Thomas


On Tue, May 17, 2016 at 3:53 PM, David Woodhouse <dw...@in...>
wrote:

> On Tue, 2016-05-17 at 14:51 +0100, Thomas Calderon wrote:
> >
> > In addition to pkcs11-tool it might be worth mentioning opkcs11-tool
> > [1], a tool that I co-develop.
>
> Hm, I note the README on Github doesn't seem to indicate that it
> supports RFC7512 PKCS#11 URIs to specify objects. Does it?
>
> The examples also explicitly specify a module, rather than using the
> system (typically p11-kit) configuration and just doing the right
> thing...
>
> --
> dwmw2
>
>
>