pkcs11: Specify object class and key type when deriving DH secrets.

pkcs11_softtoken on OpenSolaris requires this (probably others too).

diff --git a/src/libstrongswan/plugins/pkcs11/pkcs11_dh.c b/src/libstrongswan/plugins/pkcs11/pkcs11_dh.c
index fc8a33487171c4f0fe36158a800d95286c05f179..a447eb6b5816b975194264184772e5b6910656a5 100644 (file)
--- a/src/libstrongswan/plugins/pkcs11/pkcs11_dh.c
+++ b/src/libstrongswan/plugins/pkcs11/pkcs11_dh.c
@@ -93,7 +93,11 @@ static bool get_cka_value(private_pkcs11_dh_t *this, CK_OBJECT_HANDLE obj,
 METHOD(diffie_hellman_t, set_other_public_value, void,
        private_pkcs11_dh_t *this, chunk_t value)
 {
+       CK_OBJECT_CLASS klass = CKO_SECRET_KEY;
+       CK_KEY_TYPE type = CKK_GENERIC_SECRET;
        CK_ATTRIBUTE attr[] = {
+               { CKA_CLASS, &klass, sizeof(klass) },
+               { CKA_KEY_TYPE, &type, sizeof(type) },
        };
        CK_MECHANISM mech = {
                CKM_DH_PKCS_DERIVE,