[kmf-discuss] pktool import/export file <-> pkcs11

[Wyllys Ingersoll]

Darren J Moffat wrote:
> $ pktool genkey keystore=file outkey=key keytype=generic keylen=128 print=y
>          Key Value ="af28fcf622b560e29da85ba95eef232f"
> $ pktool import keystore=pkcs11 infile=key label=generic
> File format not recognized.
>
> I expected that to work, I also expected the "opposite" to work too and 
> it doesn't either:
>
> $  pktool genkey print=y keystore=pkcs11 label=generic-128 
> keytype=generic keylen=128
> Enter PIN for Sun Software PKCS#11 softtoken  :
>          Key Value ="8d6545f32fd74d46be5578a7e1174053"
>
> $  pktool export  keystore=pkcs11 outfile=key outformat=der 
> label=generic-128
> Warning: file "key" exists, will be overwritten.
> Continue with export? y
> Error exporting objects:
> libkmf error: KMF_ERR_CERT_NOT_FOUND
>
> truss shows that pktool is calling KMF_FindCert() but I'm not trying to 
> export a certificate just a generic secret key.
>
>   

I am investigating this now.

-Wyllys