pkcs11 — archive

Proposal: Supporting multiple callers in process

From: Gil Abel
To: [email protected]
Date: Thu, 16 May 2013 13:38:00 -0000

Hi Stef, This is indeed an annoying part in the specs, which probably all of us have suffered from... I would suggest to go for your first approach with one additional constrain - not allowing to explicitly longing on from a SO RO session, which is meaningless. i.e. the specs will allow creating a RO session even if another RW session is logged in as SO, but not allow to login form that RO session. Then, return as you said CKS_RO_PUBLIC_SESSION for the RO session. This will solve the practical problem. Of course, a clarification note would have to be added to the specs ;) Cheers, Gil.