set the GNUTLS_PIN_CONTEXT_SPECIFIC flag on PIN callback

diff --git a/lib/pkcs11.c b/lib/pkcs11.c
index 8f08fcba939f7ddc4138d776d27cc282c061daf4..eebdc46764ca0fc42a618f887fd60f01ed51e52d 100644 (file)
--- a/lib/pkcs11.c
+++ b/lib/pkcs11.c
@@ -2133,6 +2133,9 @@ retrieve_pin_from_callback(const struct pin_info_st *pin_info,
 
        if (user_type == CKU_USER || user_type == CKU_CONTEXT_SPECIFIC) {
                flags |= GNUTLS_PIN_USER;
+
+               if (user_type == CKU_CONTEXT_SPECIFIC)
+                       flags |= GNUTLS_PIN_CONTEXT_SPECIFIC;
                if (token_info->flags & CKF_USER_PIN_COUNT_LOW)
                        flags |= GNUTLS_PIN_COUNT_LOW;
                if (token_info->flags & CKF_USER_PIN_FINAL_TRY)