p11-nss.txt

name = nss

slot = 2

#password = test12

library = ${nss.lib}

nssArgs = "configdir='.' certPrefix='' keyPrefix='' secmod='secmod.db'"

#forceLogin = true

attributes(*,CKO_PRIVATE_KEY,*) = {
  CKA_TOKEN = true
}

attributes(import,CKO_PRIVATE_KEY,*) = {
  CKA_SENSITIVE = true
  CKA_EXTRACTABLE = false
}

attributes(*,CKO_PRIVATE_KEY,CKK_RSA) = {
  CKA_SENSITIVE = true
  CKA_EXTRACTABLE = false
#  CKA_DECRYPT = true
  CKA_SIGN = true
#  CKA_SIGN_RECOVER = true
#  CKA_UNWRAP = true
}

attributes(*,CKO_SECRET_KEY,*) = {
  CKA_TOKEN = false
  CKA_SENSITIVE = true
  CKA_EXTRACTABLE = false
  CKA_ENCRYPT = true
  CKA_DECRYPT = true
#  CKA_WRAP = true
#  CKA_UNWRAP = true
}