p11-kit-trust: investigate whether CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER can be used (#912) · Issues · gnutls / GnuTLS · GitLab

p11-kit-trust: investigate whether CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER can be used

p11-kit now supports the [`CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER` PKCS#11 option](https://github.com/p11-glue/p11-kit/releases/tag/0.23.19). We should investigate where in the PKCS#11 validation this fits, and how we should use it.

issue