Do not query for CKA_ALWAYS_AUTHENTICATE if PKCS#11 Cryptoki version < 2.20

[strongswan.git] / src / libstrongswan / plugins / pkcs11 / pkcs11_library.h

diff --git a/src/libstrongswan/plugins/pkcs11/pkcs11_library.h b/src/libstrongswan/plugins/pkcs11/pkcs11_library.h
index 33e5f97..abe0234 100644 (file)
--- a/src/libstrongswan/plugins/pkcs11/pkcs11_library.h
+++ b/src/libstrongswan/plugins/pkcs11/pkcs11_library.h
@@ -35,6 +35,8 @@ typedef struct pkcs11_library_t pkcs11_library_t;
 enum pkcs11_feature_t {
        /** CKA_TRUSTED attribute supported for certificate objects */
        PKCS11_TRUSTED_CERTS = (1<<0),
+       /** CKA_ALWAYS_AUTHENTICATE attribute supported for private keys */
+       PKCS11_ALWAYS_AUTH_KEYS = (1<<1),
 };
 
 /**