name = nss

slot = 2

#password = test12

library = ${nss.lib}

nssArgs = "configdir='.' certPrefix='' keyPrefix='' secmod='secmod.db'"

#forceLogin = true

attributes(*,CKO_PRIVATE_KEY,*) = {

  CKA_TOKEN = true

}

attributes(import,CKO_PRIVATE_KEY,*) = {

  CKA_SENSITIVE = true

  CKA_EXTRACTABLE = false

}

attributes(*,CKO_PRIVATE_KEY,CKK_RSA) = {

  CKA_SENSITIVE = true

  CKA_EXTRACTABLE = false

#  CKA_DECRYPT = true

  CKA_SIGN = true

#  CKA_SIGN_RECOVER = true

#  CKA_UNWRAP = true

}

attributes(*,CKO_SECRET_KEY,*) = {

  CKA_TOKEN = false

  CKA_SENSITIVE = true

  CKA_EXTRACTABLE = false

  CKA_ENCRYPT = true

  CKA_DECRYPT = true

#  CKA_WRAP = true

#  CKA_UNWRAP = true

}