Skip to content

Commit

Permalink
Add compile-time option WOLFSSL_PKCS11_RW_TOKENS
Browse files Browse the repository at this point in the history
By default, wolfcrypt PKCS11 interface accesses tokens in read-only
mode. In some cases, we might want to build the client with write
permissions, i.e. when initializing tokens via C_InitToken().

The WOLFSSL_PKCS11_RW_TOKENS option, if present, allows write access to
PKCS11 tokens.
  • Loading branch information
danielinux committed Sep 15, 2023
1 parent 7d85e39 commit ca56b79
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions wolfcrypt/src/wc_pkcs11.c
Original file line number Diff line number Diff line change
Expand Up @@ -3755,7 +3755,12 @@ int wc_Pkcs11_CryptoDevCb(int devId, wc_CryptoInfo* info, void* ctx)
int ret = 0;
Pkcs11Token* token = (Pkcs11Token*)ctx;
Pkcs11Session session;

#ifdef WOLFSSL_PKCS11_RW_TOKENS
int readWrite = 1;
#else
int readWrite = 0;
#endif

if (devId <= INVALID_DEVID || info == NULL || ctx == NULL)
ret = BAD_FUNC_ARG;
Expand Down

0 comments on commit ca56b79

Please sign in to comment.