Documented that it was initially based on neon pkcs11 and got ideas from pkcs11-helpe...

diff --git a/lib/pkcs11.c b/lib/pkcs11.c
index bb2ba8da0fab5f522c136f92b4a832c8370aca65..fb35640033db3ddb7c9f64d569e431bb25638a9a 100644 (file)
--- a/lib/pkcs11.c
+++ b/lib/pkcs11.c
@@ -4,6 +4,9 @@
  * 
  * Author: Nikos Mavrogiannopoulos
  *
+ * Inspired and some parts based on neon PKCS #11 support by Joe Orton.
+ * More ideas came from the pkcs11-helper library.
+ *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
@@ -1385,27 +1388,3 @@ cleanup:
     return ret;
 }
 
-
-/* To do list for PKCS#11 support:
-
-   - propagate error strings back to ne_session; use new 
-   pakchois_error() for pakchois API 0.2
-   - add API to specify a particular slot number to use for clicert
-   - add API to specify a particular cert ID for clicert
-   - find a certificate which has an issuer matching the 
-     CA dnames given by GnuTLS
-   - make sure subject name matches between pubkey and privkey
-   - check error handling & fail gracefully if the token is 
-   ejected mid-session
-   - add API to enumerate/search provided certs and allow 
-     direct choice? (or just punt)
-   - the session<->provider interface requires that 
-   one clicert is used for all sessions.  remove this limitation
-   - add API to import all CA certs as trusted
-   (CKA_CERTIFICATE_CATEGORY seems to be unused unfortunately; 
-    just add all X509 certs with CKA_TRUSTED set to true))
-   - make DSA work
-
-*/
-
-