NAME¶

p11sak_defined_attrs.conf - Configuration file for p11sak list-key command.

DESCRIPTION¶

The p11sak tool uses the configuration files ~/.p11sak_defined_attrs.conf and /etc/opencryptoki/p11sak_defined_attrs.conf to read information about custom attributes that shall be printed with the p11sak list-key command.

This configuration file path can be overwritten by the user with the environment variable P11SAK_DEFAULT_CONF_FILE. If the environment variable is not set, then .p11sak_defined_attrs.conf is first tried to be read from the current user's home directory. If this is not available, the global /etc/opencryptoki/p11sak_defined_attrs.conf config file is read. If none of these files are available, a warning message is displayed, and printing of custom attributes is not available.

SYNTAX¶

Each attribute description is composed of the attribute title, brackets and three key-value pairs.

Example:

attribute
{
name = CKA_IBM_RESTRICTABLE
id = 0x80010001
type = CK_BBOOL
}

All three keywords name , id , type are required to define an attribute.

The name must start with a letter followed by an arbitrary number of letters, numbers, underscores, dots, minuses, or slashes. The id can be in decimal as well as in hexadecimal, when started with 0x, format. The only valid values for type are:

• CK_BBOOL
• CK_ULONG
• CK_BYTE
• CK_DATE

Notes¶

The pound sign ('#') is used to indicate a comment up to and including the end of line.

SEE ALSO¶

p11sak(1)