pkinit updates

[Nicolas Williams]

On Wed, Dec 13, 2006 at 05:17:28PM -0600, Douglas E. Engert wrote:
> Nicolas Williams wrote:
> >Whereas the way I read it is that CITI/MIT's PKINIT implementation is an
> >"application" that is free to define labels.
> 
> Even if I agreed with you, you application  has to associate the label with
> the card, and it can not write in the card, so it has to store the
> maping somewhere else, or derive the label from the cert.

Huh?  C_InitToken() is the administrative function to be used when
creating the credential to set the token label.

Nico
--