p11-nss.txt

# Configuration to run unit tests with NSS

name = NSS

slot = 1

#showInfo = true

library = ${pkcs11test.nss.lib}

nssArgs = "configdir='${pkcs11test.nss.db}' certPrefix='' keyPrefix='' secmod='secmod.db' flags=readOnly"

# HMAC_SHA256/384/512 broken until NSS 3.10.2
# see https://bugzilla.mozilla.org/show_bug.cgi?id=291858
disabledMechanisms = {
  CKM_SHA256_HMAC
  CKM_SHA384_HMAC
  CKM_SHA512_HMAC
}

attributes = compatibility

# NSS needs CKA_NETSCAPE_DB for DSA and DH private keys
# just put an arbitrary value in there to make it happy

attributes(*,CKO_PRIVATE_KEY,CKK_DSA) = {
  CKA_NETSCAPE_DB = 0h00
}

attributes(*,CKO_PRIVATE_KEY,CKK_DH) = {
  CKA_NETSCAPE_DB = 0h00
}