[xmlsec] Re: get PKCS11 slot

Aleksey Sanin aleksey at aleksey.com
Wed Jun 18 08:37:57 PDT 2003


First of all, please use xmlsec mailing list for any questions regarding 
Otherwise, you messages have a very good chance to go to my trash (sorry,
I recieve too many spam).

Probably the simplest solution to your problem would be to have a special
NSS specific function "SetSlot" that will set slot in 
structure. Later on, xmlSecNssEvpBlockCipherCtxInit() would use either this
slot or call GetBestSlot(). This would change an internal xmlsec-nss 
not visible to user and I don't see any backward compatibility problems.


Andrew Fan wrote:

> Hi Aleksey,
> In the crypto engine implementation on NSS, you use the interface: 
> PK11_GetBestSlot to initialize a slot( in cipher.c ). I think, if  a 
> Kalss, such as xmlSecNssAes128CbcKlass can accept a parameter( 
> PK11SlotInfo* ), it'll be better. Because a user maybe want to use a 
> particular slot instead of the default ones. PK11-GetBestSlot can not 
> tie to a particular slot, I think.
> If I correct, how can I feed the parameter( PK11SlotInfo* ) into a 
> certain Klass?
> Thanks & Regards,
> Andrew

More information about the xmlsec mailing list