Re: [pkcs11] Re: Proposal: New CKA_DESTROYABLE attribute

[Michael StJohns <msj@nthpermutation.com>]

On 6/12/2013 4:01 AM, Stef Walter wrote:
> On 28.05.2013 11:13, Stef Walter wrote:
> > This defines a new boolean attribute CKA_DESTROYABLE. Currently it is
> > ambiguous whether CKA_MODIFIABLE objects are destroyable with
> > C_DestroyObject.
> <snip>
>
> > | o CKR_NOT_DESTROYABLE: An attempt was made to destroy an object
> > |   which is may not be destroyed.
> Related to this. It does not seem that there is a clear CKR_xxx error
> code for when C_SetAttributeValue is called on an object with
> CKA_MODIFIABLE = CK_FALSE.

Wouldn't you return CKR_ATTRIBUTE_READ_ONLY in this case?

Mike


> Do we want to define such an error code, and perhaps use it for both
> situations? Perhaps something like CKR_NOT_PERMITTED?
>
> Cheers,
>
> Stef
>
>
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php