--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/test/jdk/sun/security/tools/keytool/p11-nss.txt	Tue Sep 12 19:03:39 2017 +0200
@@ -0,0 +1,39 @@
+name = nss
+
+slot = 2
+
+#password = test12
+
+library = ${nss.lib}
+
+nssArgs = "configdir='.' certPrefix='' keyPrefix='' secmod='secmod.db'"
+
+#forceLogin = true
+
+attributes(*,CKO_PRIVATE_KEY,*) = {
+  CKA_TOKEN = true
+}
+
+attributes(import,CKO_PRIVATE_KEY,*) = {
+  CKA_SENSITIVE = true
+  CKA_EXTRACTABLE = false
+}
+
+attributes(*,CKO_PRIVATE_KEY,CKK_RSA) = {
+  CKA_SENSITIVE = true
+  CKA_EXTRACTABLE = false
+#  CKA_DECRYPT = true
+  CKA_SIGN = true
+#  CKA_SIGN_RECOVER = true
+#  CKA_UNWRAP = true
+}
+
+attributes(*,CKO_SECRET_KEY,*) = {
+  CKA_TOKEN = false
+  CKA_SENSITIVE = true
+  CKA_EXTRACTABLE = false
+  CKA_ENCRYPT = true
+  CKA_DECRYPT = true
+#  CKA_WRAP = true
+#  CKA_UNWRAP = true
+}