p11sak_defined_attrs.conf - Configuration file for p11sak list-key command.

Description

The p11sak tool uses the configuration files ~/.p11sak_defined_attrs.conf and /etc/opencryptoki/p11sak_defined_attrs.conf to read information about custom attributes that shall be printed with the p11saklist-key command. This configuration file path can be overwritten by the user with the environment variable P11SAK_DEFAULT_CONF_FILE. If the environment variable is not set, then .p11sak_defined_attrs.conf is first tried to be read from the current user's home directory. If this is not available, the global /etc/opencryptoki/p11sak_defined_attrs.conf config file is read. If none of these files are available, a warning message is displayed, and printing of custom attributes is not available.

Name

p11sak_defined_attrs.conf - Configuration file for p11saklist-key command.

Notes

The pound sign ('#') is used to indicate a comment up to and including the end of line.

Syntax

Each attribute description is composed of the attribute title, brackets and three key-value pairs. Example: attribute { name = CKA_IBM_RESTRICTABLE id = 0x80010001 type = CK_BBOOL } All three keywords name , id , type are required to define an attribute. The name must start with a letter followed by an arbitrary number of letters, numbers, underscores, dots, minuses, or slashes. The id can be in decimal as well as in hexadecimal, when started with 0x, format. The only valid values for type are: • CK_BBOOL • CK_ULONG • CK_BYTE • CK_DATE