RetroZilla/security/nss/lib/ckfw/nssmkey
roytam1 a572ea8ca3 cherry-picked mozilla NSS upstream changes (to rev 82de44ead36f, which is on par with 3.18):
bug1095307, bug1073330(backout), bug1084986, bug1050069, bug942172, bug1054547, bug532081, bug1096348, bug1058870, bug1093940, bug1102985, bug1112461, bug1094492, bug112029, bug1119983, bug1120685, bug1120691, bug1113632, bug863076, bug1082973, bug1124539, bug1117617, bug1117621, bug1121273, bug753136, bug921684, bug1132818, bug1125375, bug647690, bug1055441, bug1134455, bug975010, bug950369, bug1128367, bug1129573, bug1136095, bug1117897, bug1113453, bug1061725, bug1073330, bug1111901, bug1083900, bug1136095, bug1138820, bug1096741, bug1134548, bug345725, bug950348, bug950344, bug1151037, bug991783, bug1153994
2018-07-14 21:22:30 +08:00
..
ckmk.h NSS: update to 3.15.5 2018-05-19 22:01:21 +08:00
ckmkver.c NSS: update to 3.15.5 2018-05-19 22:01:21 +08:00
config.mk NSS: update to 3.15.5 2018-05-19 22:01:21 +08:00
Makefile NSS: update to 3.15.5 2018-05-19 22:01:21 +08:00
manchor.c NSS: update to 3.15.5 2018-05-19 22:01:21 +08:00
manifest.mn NSS: update to 3.15.5 2018-05-19 22:01:21 +08:00
mconstants.c NSS: update to 3.15.5 2018-05-19 22:01:21 +08:00
mfind.c NSS: update to 3.15.5 2018-05-19 22:01:21 +08:00
minst.c NSS: update to 3.15.5 2018-05-19 22:01:21 +08:00
mobject.c cherry-picked mozilla NSS upstream changes (to rev 82de44ead36f, which is on par with 3.18): 2018-07-14 21:22:30 +08:00
mrsa.c NSS: update to 3.15.5 2018-05-19 22:01:21 +08:00
msession.c NSS: update to 3.15.5 2018-05-19 22:01:21 +08:00
mslot.c NSS: update to 3.15.5 2018-05-19 22:01:21 +08:00
mtoken.c NSS: update to 3.15.5 2018-05-19 22:01:21 +08:00
nssmkey.def NSS: update to 3.15.5 2018-05-19 22:01:21 +08:00
nssmkey.h NSS: update to 3.15.5 2018-05-19 22:01:21 +08:00
README first commit 2015-10-20 23:03:22 -04:00
staticobj.c NSS: update to 3.15.5 2018-05-19 22:01:21 +08:00

This Cryptoki module provides acces to certs and keys stored in
Macintosh key Ring.

- It does not yet export PKCS #12 keys. To get this to work should be 
  implemented using exporting the key object in PKCS #8 wrapped format.
  PSM work needs to happen before this can be completed.
- It does not import or export CA Root trust from the mac keychain.
- It does not handle S/MIME objects (pkcs #7 in mac keychain terms?).
- The AuthRoots don't show up on the default list.
- Only RSA keys are supported currently.

There are a number of things that have not been tested that other PKCS #11
apps may need:
- reading Modulus and Public Exponents from private keys and public keys.
- storing public keys.
- setting attributes other than CKA_ID and CKA_LABEL.

Other TODOs:
- Check for and plug memory leaks.
- Need to map mac errors into something more intellegible than 
  CKR_GENERAL_ERROR.