X

ksslcfg(1M) and the -T option on S10

Guest Author


http-equiv="content-type">
ksslcfg(1M) and the -T option on S10


ksslcfg(1m) has a -T option. From the man page -



-T token_label

         When pkcs11 is specified with -f, uses the PKCS#11 token

         specified in token_label. Use cryptoadm list -v to

         display all PKCS#11 tokens available.



and from the Examples section


         # ksslcfg create -f pkcs11 -T "Sun Software PKCS#11 softtoken" \\

         -C "Server-Cert" -p /some/directory/password -u webservd \\

         -x 8080 www.mysite.com 443



The above example does not work in S10 due to a bug (6507464) that will
be fixed. A work around is to disable metaslot before running
the command and enable it after. So, do this for the above example




#cryptoadm disable metaslot


#ksslcfg create -f pkcs11 -T "Sun Software PKCS#11 softtoken" ...


#cryptoadm enable metaslot




Technorati Tag: rel="tag">OpenSolaris


Technorati Tag: rel="tag">Solaris



Be the first to comment

Comments ( 0 )
Please enter your name.Please provide a valid email address.Please enter a comment.CAPTCHA challenge response provided was incorrect. Please try again.Captcha