NAME

       p11sak_defined_attrs.conf - Configuration file for p11sak list-key command.

DESCRIPTION

       The     p11sak     tool     uses     the    configuration    files    ~/.p11sak_defined_attrs.conf    and
       /etc/opencryptoki/p11sak_defined_attrs.conf to read information about custom  attributes  that  shall  be
       printed with the p11sak list-key command.

       This   configuration   file   path  can  be  overwritten  by  the  user  with  the  environment  variable
       P11SAK_DEFAULT_CONF_FILE.  If the environment variable is not  set,  then  .p11sak_defined_attrs.conf  is
       first  tried  to  be  read  from  the current user's home directory. If this is not available, the global
       /etc/opencryptoki/p11sak_defined_attrs.conf config file is read.  If none of these files are available, a
       warning message is displayed, and printing of custom attributes is not available.

SYNTAX

       Each attribute description is composed of the attribute title, brackets and three key-value pairs.

       Example:

        attribute
        {
            name = CKA_IBM_RESTRICTABLE
            id = 0x80010001
            type = CK_BBOOL
        }

       All three keywords name , id , type are required to define an attribute.

       The name must start with a letter followed by an arbitrary number of letters, numbers, underscores, dots,
       minuses, or slashes.  The id can be in decimal as well as in hexadecimal, when started with  0x,  format.
       The only valid values for type are:

       • CK_BBOOL

       • CK_ULONG

       • CK_BYTE

       • CK_DATE

Notes

       The pound sign ('#') is used to indicate a comment up to and including the end of line.

SEE ALSO

       p11sak(1)