OASIS PKCS 11 TC

 View Only

Issues I found with my document scanner that needs a wider audiance to address.

  • 1.  Issues I found with my document scanner that needs a wider audiance to address.

    Posted 09-11-2026 21:23
    With Simo and Dietre's help, I've been able to fix a number of issuers
    the parse_doc.pl pointed out when comparing the header to the document.
    That leaves several things then need a wider audience and probably a
    committee decision to resolve:


    Missing errors from the central error code table. There error codes are
    in the header. Two are listed in the functions that return them. Three
    are referenced only in the spec and do not have entries in the central
    table nor in the list of error codes returned by any function. We need
    descriptions of each error code for the central list and we need to add
    the three missing ones to the appropriate functions that can return
    them. https://github.com/oasis-tcs/pkcs11/issues/131

    CK_TLS* indentifiers for TLS 1.0 and 1.1 are defined in the headers, but
    not in the spec, nor in the historical spec. I seem to remember that
    their removal was intentional, but we should add them to the historical
    spec. Also we we remove TLS 1.0 and 1.1, we should also move SSL3 to the
    historical spec as well (currently in the main spec).
    https://github.com/oasis-tcs/pkcs11/issues/132

    The header file has cruft from HSS's original proposal, but the final
    made changes that made these structures irrelevant. We shipped them in
    PKCS #11 v3.2 (and maybe v3.1), but we should clean them up somehow..
    https://github.com/oasis-tcs/pkcs11/issues/135


    If you have thoughts on any of these issues, please comment in the
    revelant git issues.

    Thanks,

    bob