ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

4450. [port] Provide more nuanced HSM support which better matches

Browse Source 
the specific PKCS11 providers capabilities. [RT #42458]
This commit is contained in:
Mark Andrews
2016-08-19 08:02:51 +10:00
parent 85342bec80
commit 8ee6f289d8
56 changed files with 1449 additions and 107 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
bin/tests/pkcs11/README
View File

@@ -9,6 +9,7 @@ whether the resulting digest is is correct. For instance:
...must return "9294727a3638bb1c13f48ef8158bfc9d".
If any other value is returned, then the provider library is buggy,
and the compilation flag PKCS11CRYPTOWITHHMAC must *not* be defined.
and theflag PK11_MD5_HMAC_REPLACE must be defined in
lib/isc/include/pk11/site.h
However, if the correct value is returned, then it is safe to turn
on PKCS11CRYPTOWITHHMAC. (It is off by default.)
off PK11_MD5_HMAC_REPLACE. (It is on by default.)