Skip to content

Conversation

@LinuxJedi
Copy link
Member

@LinuxJedi LinuxJedi commented Jun 4, 2025

Old behaviour for token persistent storage:

  1. If WOLFPKCS11_TOKEN_PATH env var is set and wolfPKCS11 was not compiled with WOLFPKCS11_NO_ENV, this path is used.
  2. Otherwise /tmp is used.

New behaviour:

  1. If WOLFPKCS11_TOKEN_PATH env var is set and wolfPKCS11 was not compiled with WOLFPKCS11_NO_ENV, this path is used.
  2. $HOME/.wolfPKCS11 in *nix and %APPDATA%/wolfPKCS11 is used in Windows.
  3. WOLFPKCS11_DEFAULT_TOKEN_PATH is used if set, this can be set with --with-default-token-path.
  4. /tmp is used as a lowest priority fallback.

@LinuxJedi
Copy link
Member Author

Draft for now. Requires new GH action and PR #84 to be merged for the Windows issue.

@LinuxJedi LinuxJedi force-pushed the token-path branch 3 times, most recently from 7034d1d to 7625e61 Compare June 4, 2025 11:17
@LinuxJedi
Copy link
Member Author

Windows build failure is fixed in PR #74 in master and PR #84 in NSS branch, it is due to changes in wolfTPM.

@LinuxJedi LinuxJedi marked this pull request as ready for review June 4, 2025 11:20
@LinuxJedi LinuxJedi requested a review from julek-wolfssl June 4, 2025 11:21
Old behaviour for token persistent storage:
1. If `WOLFPKCS11_TOKEN_PATH` env var is set and wolfPKCS11 was not
  compiled with `WOLFPKCS11_NO_ENV`, this path is used.
2. Otherwise `/tmp` is used.

New behaviour:
1. If `WOLFPKCS11_TOKEN_PATH` env var is set and wolfPKCS11 was not
  compiled with `WOLFPKCS11_NO_ENV`, this path is used.
2. `$HOME/.wolfPKCS11` in *nix and `%APPDIR%/wolfPKCS11` is used
   in Windows.
3. `WOLFPKCS11_DEFAULT_TOKEN_PATH` is used if set, this can be set with
   `--with-default-token-path`.
4. `/tmp` is used as a lowest priority fallback.
@julek-wolfssl
Copy link
Member

Windows failing on some unresolved tpm symbols

@julek-wolfssl julek-wolfssl merged commit 8f8d8d8 into wolfSSL:nss Jun 5, 2025
18 of 19 checks passed
@julek-wolfssl
Copy link
Member

Windows failure to be fixed in #84

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants