Nicolas.Williams at sun.com
Wed Dec 13 18:40:15 EST 2006
On Wed, Dec 13, 2006 at 05:17:28PM -0600, Douglas E. Engert wrote:
> Nicolas Williams wrote:
> >Whereas the way I read it is that CITI/MIT's PKINIT implementation is an
> >"application" that is free to define labels.
> Even if I agreed with you, you application has to associate the label with
> the card, and it can not write in the card, so it has to store the
> maping somewhere else, or derive the label from the cert.
Huh? C_InitToken() is the administrative function to be used when
creating the credential to set the token label.
More information about the krbdev