2009-06-19 Marcus Brinkmann <marcus@g10code.de>

	* src/cert-object.c (scute_attr_prv): Always set CKA_START_DATE
	and CKA_END_DATE.

ChangeLog

@@ -1,3 +1,8 @@
+2009-06-19  Marcus Brinkmann  <marcus@g10code.de>
+
+	* src/cert-object.c (scute_attr_prv): Always set CKA_START_DATE
+	and CKA_END_DATE.
+
 2009-06-19  Werner Koch  <wk@g10code.com>
 
 	* src/agent.c (MAX_SIGNATURE_LEN): Increase size to cope with 2048

src/cert-object.c

@@ -710,6 +710,13 @@ scute_attr_prv (struct cert *cert, CK_ATTRIBUTE_PTR *attrp,
     {
       one_attr (CKA_END_DATE, obj_end_date);
     }
+#else
+  /* For now, we disable these fields.  We can parse them from the
+     certificate just as the other data.  However, we would like to
+     avoid parsing the certificates at all, let's see how much
+     functionality we really need in the PKCS#11 token first.  */
+  empty_attr (CKA_START_DATE);
+  empty_attr (CKA_END_DATE);
 #endif
 
   one_attr (CKA_DERIVE, obj_derive);