RFE: tools add --module-init arg for non-standard NSS softokn configDir about opensc HOT 5 CLOSED

Recent NSS softokn fortunately supports also the environment variable NSS_LIB_PARAMS that can be used instead of the C_Initialize arguments:

nss-dev/nss@c0bbdc4

Unfortunately, this is not much documented otherwise than in the code, but if you will need some help setting this up, please let me know:

https://github.com/nss-dev/nss/blob/master/lib/softoken/pkcs11.c#L3344

I think it should be in version since NSS 3.95.

from opensc.

https://github.com/nss-dev/nss/blob/master/lib/softoken/pkcs11.c#L3344

I think it should be in version since NSS 3.95.

Thank you! That works for me on Fedora 39.

from opensc.

Would be great to document it somewhere. Every time I have to search for the code when somebody asks. If you have some code or test scripts you can share, or use in OpenSC tests or elsewhere, it would be great to have it at least as code example ...

Works via p11-kit: pkcs11-tool -> p11-kit -> nss-softokn as p11-kit supports

module: /usr/lib64/libsoftokn3.so

x-init-reserved: configDir='some/path/to/tokens'

The x-init-reserved is mentioned as support for softoken.

from opensc.

This would not be standard compliant with 3.0, which means it would be an exception purely for the NSS module:

pReserved reserved for future use. Should be NULL_PTR for this version of Cryptoki

from opensc.

Would be great to document it somewhere. Every time I have to search for the code when somebody asks. If you have some code or test scripts you can share, or use in OpenSC tests or elsewhere, it would be great to have it at least as code example ...

from opensc.