# Configuration to run unit tests with NSS

name = NSS

slot = 1

#showInfo = true

library = ${pkcs11test.nss.lib}

nssArgs = "configdir='${pkcs11test.nss.db}' certPrefix='' keyPrefix='' secmod='secmod.db' flags=readOnly"

disabledMechanisms = {
  CKM_DSA_SHA224
  CKM_DSA_SHA256
  CKM_DSA_SHA384
  CKM_DSA_SHA512
  CKM_DSA_SHA3_224
  CKM_DSA_SHA3_256
  CKM_DSA_SHA3_384
  CKM_DSA_SHA3_512
  CKM_ECDSA_SHA224
  CKM_ECDSA_SHA256
  CKM_ECDSA_SHA384
  CKM_ECDSA_SHA512
  CKM_ECDSA_SHA3_224
  CKM_ECDSA_SHA3_256
  CKM_ECDSA_SHA3_384
  CKM_ECDSA_SHA3_512
}

attributes = compatibility

# NSS needs CKA_NETSCAPE_DB for DSA and DH private keys
# just put an arbitrary value in there to make it happy

attributes(*,CKO_PRIVATE_KEY,CKK_DSA) = {
  CKA_NETSCAPE_DB = 0h00
}

attributes(*,CKO_PRIVATE_KEY,CKK_DH) = {
  CKA_NETSCAPE_DB = 0h00
}