pkinit updates

Kevin Coffman kwc at
Tue Dec 12 15:20:41 EST 2006

On 12/12/06, Douglas E. Engert <deengert at> wrote:
> Jim Rees wrote:
> > I think the PKCS11 environment variable should still work.
> Right, I found that. But I would expect the environment variable to
> be droped in favor of the -X parameters.

Yes, when we finish the real code to handle these things.

> > Our current code allows you to specify the slot like this:
> >
> > pkinit -X X509_user_identity=PKCS11:module_name:slotno
> >
> > but I don't know if that's in svn or not.
> No it choked with the :0.

This is a limitation in my initial hack to translate -X options (and
set the environment variables :-/)  It will definitely go away.  But I
will modify the hack to allow the slot number in the -X specification.

More information about the krbdev mailing list