From ea3e2adf52711db1c5d5c3834c203584124a683d Mon Sep 17 00:00:00 2001
From: Leif Johansson <leifj@sunet.se>
Date: Mon, 10 Sep 2018 10:36:00 +0200
Subject: [PATCH] p11 config

---
 .../overlay/etc/eidas-connector/pkcs11.cfg    | 33 +++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 eidas-connector-common/overlay/etc/eidas-connector/pkcs11.cfg

diff --git a/eidas-connector-common/overlay/etc/eidas-connector/pkcs11.cfg b/eidas-connector-common/overlay/etc/eidas-connector/pkcs11.cfg
new file mode 100644
index 00000000..89bdc15c
--- /dev/null
+++ b/eidas-connector-common/overlay/etc/eidas-connector/pkcs11.cfg
@@ -0,0 +1,33 @@
+#SafeNet Luna
+name = Luna
+library = /usr/safenet/lunaclient/lib/libCryptoki2_64.so
+description = Luna config
+slot = 5
+attributes(*,*,*) = {
+CKA_TOKEN = true
+}
+attributes(*,CKO_SECRET_KEY,*) = {
+CKA_CLASS=4
+CKA_PRIVATE= true
+CKA_KEY_TYPE = 21
+CKA_SENSITIVE= true
+CKA_ENCRYPT= true
+CKA_DECRYPT= true
+CKA_WRAP= true
+CKA_UNWRAP= true
+}
+attributes(*,CKO_PRIVATE_KEY,*) = {
+CKA_CLASS=3
+CKA_LABEL=true
+CKA_PRIVATE = true
+CKA_DECRYPT=true
+CKA_SIGN=true
+CKA_UNWRAP=true
+}
+attributes(*,CKO_PUBLIC_KEY,*) = {
+CKA_CLASS=2
+CKA_LABEL=true
+CKA_ENCRYPT = true
+CKA_VERIFY=true
+CKA_WRAP=true
+}