1P11SAK_DEFINED_ATTRS.CONF(5) openCryptoki P11SAK_DEFINED_ATTRS.CONF(5)
2
3
4
6 p11sak_defined_attrs.conf - Configuration file for p11sak list-key com‐
7 mand.
8
9
11 p11sak uses a configuration file at /etc/opencryptoki/p11sak_de‐
12 fined_attrs.conf. This configuration file path can be overwritten by
13 the user with the environment variable P11SAK_DEFAULT_CONF_FILE.
14
15 This is a text file that contains information used to configure non
16 standard attributes that shall be printed with the p11sak list-key com‐
17 mand.
18
19
21 Each attribute description is composed of the attribute title, brackets
22 and three key-value pairs. e.g.:
23
24 attribute
25 {
26 name = CKA_IBM_RESTRICTABLE
27 id = 0x80010001
28 type = CK_BBOOL
29 }
30
31 All three keywords name , id , type are required to define an attri‐
32 bute.
33
34 The name has to start with a letter followed by an arbitrary number of
35 letters, numbers, underscores, dots, minuses, or slashes. The id is
36 defined in the PKCS#11 standard and can be in decimal as well as in
37 hexadecimal, when started with 0x, format. The only valid values for
38 type are CK_BBOOL , CK_ULONG or CK_BYTE.
39
40
42 The pound sign ('#') is used to indicate a comment up to and including
43 the end of line.
44
45
47 p11sak(1),
48
49
50
513.17.0 September 2021 P11SAK_DEFINED_ATTRS.CONF(5)