[gnutls-devel] GnuTLS | pkcs11-provider: rework to share the code with the existing PKCS#11 support (!2018)

Read-only notification of GnuTLS library development activities gnutls-devel at lists.gnutls.org
Wed Sep 17 21:36:11 CEST 2025




Alexander Sosedkin started a new discussion on lib/pkcs11/p11_mac.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/2018#note_2758501300

 >  	if (key_size != mac->length)
 >  		return gnutls_assert_val(GNUTLS_E_INVALID_REQUEST);
 >  
 > -	params.bExpand = CK_TRUE;
 > +	params.bExpand = true;
 >  	params.prfHashMechanism = mac->mech;
 >  
 >  	if (info != NULL && info_size != 0) {
 > -		params.pInfo = (CK_BYTE_PTR)info;
 > +		params.pInfo = (unsigned char *)info;

these attrnames are guarded by `CRYPTOKI_COMPAT`, which are supposed to be disabled by `CRYPTOKI_GNU`, unless specifically enabled back... how do they work?

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2018#note_2758501300
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20250917/2d92db7d/attachment-0001.html>


More information about the Gnutls-devel mailing list