doc: Recommend pin caching in combination with pin_cache_ignore_user_consent configuration option

This commit is contained in:
Jakub Jelen 2020-06-09 14:00:34 +02:00 committed by Frank Morgner
parent 97ec23a2d9
commit 0defebfe05
2 changed files with 7 additions and 0 deletions

View File

@ -1163,6 +1163,11 @@ app <replaceable>application</replaceable> {
<literal>CKA_ALWAYS_AUTHENTICATE</literal> may
need to set this to get signatures to work with
some cards (Default: <literal>false</literal>).
</para>
<para>
It is recommended to enable also PIN caching using
<literal>use_pin_caching</literal> option for OpenSC
to be able to provide PIN for the card when needed.
</para></listitem>
</varlistentry>
<varlistentry>

View File

@ -903,6 +903,8 @@ app default {
# Older PKCS#11 applications not supporting CKA_ALWAYS_AUTHENTICATE
# may need to set this to get signatures to work with some cards.
# Default: false
# It is recommended to enable also use_pin_caching to allow OpenSC
# to pass the pin to the card when needed.
# pin_cache_ignore_user_consent = true;
# How to handle a PIN-protected certificate