NAME

       p11sak_defined_attrs.conf - Configuration file for p11sak list-key command.

DESCRIPTION

       The   p11sak   tool   uses   the   configuration  files  ~/.p11sak_defined_attrs.conf  and
       /etc/opencryptoki/p11sak_defined_attrs.conf to read information  about  custom  attributes
       that shall be printed with the p11sak list-key command.

       This  configuration file path can be overwritten by the user with the environment variable
       P11SAK_DEFAULT_CONF_FILE.    If   the   environment   variable   is    not    set,    then
       .p11sak_defined_attrs.conf  is  first  tried  to  be  read  from  the  current user's home
       directory.       If       this       is       not       available,       the        global
       /etc/opencryptoki/p11sak_defined_attrs.conf  config  file is read.  If none of these files
       are available, a warning message is displayed, and printing of custom  attributes  is  not
       available.

SYNTAX

       Each  attribute  description  is  composed  of  the  attribute  title,  brackets and three
       key-value pairs.

       Example:

        attribute
        {
            name = CKA_IBM_RESTRICTABLE
            id = 0x80010001
            type = CK_BBOOL
        }

       All three keywords name , id , type are required to define an attribute.

       The name must start with a letter followed by an arbitrary  number  of  letters,  numbers,
       underscores,  dots,  minuses,  or  slashes.   The  id  can  be  in  decimal  as well as in
       hexadecimal, when started with 0x, format.  The only valid values for type are:

       • CK_BBOOL

       • CK_ULONG

       • CK_BYTE

       • CK_DATE

Notes

       The pound sign ('#') is used to indicate a comment up to and including the end of line.

SEE ALSO

       p11sak(1)