|
1 This Cryptoki module provides acces to certs and keys stored in |
|
2 Macintosh key Ring. |
|
3 |
|
4 - It does not yet export PKCS #12 keys. To get this to work should be |
|
5 implemented using exporting the key object in PKCS #8 wrapped format. |
|
6 PSM work needs to happen before this can be completed. |
|
7 - It does not import or export CA Root trust from the mac keychain. |
|
8 - It does not handle S/MIME objects (pkcs #7 in mac keychain terms?). |
|
9 - The AuthRoots don't show up on the default list. |
|
10 - Only RSA keys are supported currently. |
|
11 |
|
12 There are a number of things that have not been tested that other PKCS #11 |
|
13 apps may need: |
|
14 - reading Modulus and Public Exponents from private keys and public keys. |
|
15 - storing public keys. |
|
16 - setting attributes other than CKA_ID and CKA_LABEL. |
|
17 |
|
18 Other TODOs: |
|
19 - Check for and plug memory leaks. |
|
20 - Need to map mac errors into something more intellegible than |
|
21 CKR_GENERAL_ERROR. |