gecko/security/nss/lib/ckfw/nssmkey
2009-04-07 03:36:45 +02:00
..
ckmk.h Import NSS_3_12_RC4 2008-06-06 08:40:11 -04:00
ckmkver.c Import NSS_3_12_RC4 2008-06-06 08:40:11 -04:00
config.mk Import NSS_3_12_RC4 2008-06-06 08:40:11 -04:00
Makefile Import NSS_3_12_RC4 2008-06-06 08:40:11 -04:00
manchor.c Import NSS_3_12_RC4 2008-06-06 08:40:11 -04:00
manifest.mn Import NSS_3_12_RC4 2008-06-06 08:40:11 -04:00
mconstants.c Import NSS_3_12_RC4 2008-06-06 08:40:11 -04:00
mfind.c Import NSS_3_12_RC4 2008-06-06 08:40:11 -04:00
minst.c Import NSS_3_12_RC4 2008-06-06 08:40:11 -04:00
mobject.c Bug 486182, Land NSS 3.12.3 final in mozilla-central 2009-04-07 03:36:45 +02:00
mrsa.c Import NSS_3_12_RC4 2008-06-06 08:40:11 -04:00
msession.c Import NSS_3_12_RC4 2008-06-06 08:40:11 -04:00
mslot.c Import NSS_3_12_RC4 2008-06-06 08:40:11 -04:00
mtoken.c Import NSS_3_12_RC4 2008-06-06 08:40:11 -04:00
nssmkey.def Import NSS_3_12_RC4 2008-06-06 08:40:11 -04:00
nssmkey.h Import NSS_3_12_RC4 2008-06-06 08:40:11 -04:00
README Import NSS_3_12_RC4 2008-06-06 08:40:11 -04:00
staticobj.c Bug 461082, Deliver NSS 3.12.2 and NSPR 4.7.2 to Mozilla 2008-10-23 02:38:29 +02:00

This Cryptoki module provides acces to certs and keys stored in
Macintosh key Ring.

- It does not yet export PKCS #12 keys. To get this to work should be 
  implemented using exporting the key object in PKCS #8 wrapped format.
  PSM work needs to happen before this can be completed.
- It does not import or export CA Root trust from the mac keychain.
- It does not handle S/MIME objects (pkcs #7 in mac keychain terms?).
- The AuthRoots don't show up on the default list.
- Only RSA keys are supported currently.

There are a number of things that have not been tested that other PKCS #11
apps may need:
- reading Modulus and Public Exponents from private keys and public keys.
- storing public keys.
- setting attributes other than CKA_ID and CKA_LABEL.

Other TODOs:
- Check for and plug memory leaks.
- Need to map mac errors into something more intellegible than 
  CKR_GENERAL_ERROR.