---
name: "p11sak_defined_attrs.conf"
section: "5"
platform: "linux"
package: "opencryptoki"
version: "3.23.0+dfsg-0.3+deb13u1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/p11sak_defined_attrs.conf"
---

# p11sak\_defined\_attrs.conf(5)

Configuration file for p11sak list-key command.

## NAME

p11sak\_defined\_attrs.conf - Configuration file for **p11sak list-key** command.

## DESCRIPTION

The **p11sak** tool uses the configuration files **~/.p11sak\_defined\_attrs.conf** and **/etc/opencryptoki/p11sak\_defined\_attrs.conf** to read information about custom attributes that shall be printed with the **p11sak list-key** command.

This configuration file path can be overwritten by the user with the environment variable **P11SAK\_DEFAULT\_CONF\_FILE**. If the environment variable is not set, then **.p11sak\_defined\_attrs.conf** is first tried to be read from the current user's home directory. If this is not available, the global **/etc/opencryptoki/p11sak\_defined\_attrs.conf** config file is read. If none of these files are available, a warning message is displayed, and printing of custom attributes is not available.

## SYNTAX

Each attribute description is composed of the attribute title, brackets and three key-value pairs.

Example:

 attribute\
  {\
      name = CKA\_IBM\_RESTRICTABLE\
      id = 0x80010001\
      type = CK\_BBOOL\
  }

All three keywords **name** , **id** , **type** are required to define an attribute.

The **name** must start with a letter followed by an arbitrary number of letters, numbers, underscores, dots, minuses, or slashes. The **id** can be in decimal as well as in hexadecimal, when started with 0x, format. The only valid values for **type** are:

- •

  **CK\_BBOOL**

- •

  **CK\_ULONG**

- •

  **CK\_BYTE**

- •

  **CK\_DATE**

## Notes

The pound sign ('#') is used to indicate a comment up to and including the end of line.

## SEE ALSO

- [**p11sak**(1)](/p11sak/1.md)