OASIS PKCS 11 TC

 View Only

  • 1.  CKA_VALIDATION_FLAG vs CKA_VALIDATION_FLAGS

    Posted 01-07-2025 15:47
    Hello all,
    I find the name of these two attribute too close and confusing, I found my experimental code already accidentally using one instead of the other, and I think keeping the names as is will easily cause confusion and mistakes.
    Any chance we can find a better name for one of them so that is is clear which one is set only on the validation objects and which one is set on any other object ?


    ------------------------------
    Simo Sorce
    Red Hat
    ------------------------------


  • 2.  RE: CKA_VALIDATION_FLAG vs CKA_VALIDATION_FLAGS

    Posted 01-07-2025 15:52

    Replying to myself I think CKA_OBJECT_VALIDATIONS might be a reasonable name for what is currently called CKA_VALIDATION_FLAGS



    ------------------------------
    Simo Sorce
    Red Hat
    ------------------------------

    Original Message


  • 3.  RE: CKA_VALIDATION_FLAG vs CKA_VALIDATION_FLAGS

    Posted 01-08-2025 10:26

    THALES GROUP LIMITED DISTRIBUTION to email recipients

     

    Hi,

    I agree that this is not ideal (CKA_VALIDATION_FLAG and CKA_VALIDATION_FLAGS) from a readability and usability point of view.

    Your suggestion is fine by me.

     

    Side question; is CKA_SESSION_VALIDATION_FLAGS_TYPE described anywhere? what the purpose of that field. My understanding that the "pFlags" parameter to C_GetSessionValidationFlags was populated with the validation flag(s) that the last operation complies with. But it isn't clear to me what the "type" parameter is supposed to define.

     

    Thanks 

     




    Original Message


Related Content