350502 - Implement PKCS11 extensions

Status: NEW

(NSS :: Libraries, enhancement, P4)

Description

[Chandrasekar Kannan]

We need the following functionality made available in NSS.

for example, 

(1) ability to import a CA certificate onto a HSM and to mark it trusted
there. 

Right now, NSS is not able to do this because we do not have the PKCS 11
extensions implemented. 


bob relyea mentioned to me that its not part of the standard. 

This bug is being filed to track this issue.

Comment 1

[Nelson Bolyard (seldom reads bugmail)]

NSS already implements its own non-standard PKCS#11 extensions for this purpose.

So, It appears to me that this RFE is requesting that NSS's extensions to 
PKCS#11 be added to the standard, so that HSM vendors will implement it.  
Is that what this RFE is requesting?

If so, the summary should be "Standardize NSS's PKCS#11 extensions".

If not, then please explain what is really being requested.  

Comment 2

[Julien Pierre]

Chandrasekar, you will need to take this up with the PKCS#11 working group before any progress can be made on this bug.