d1f78b7
diff -up jss-4.2.6/mozilla/security/jss/org/mozilla/jss/pkcs11/PK11KeyPairGenerator.c.cfu jss-4.2.6/mozilla/security/jss/org/mozilla/jss/pkcs11/PK11KeyPairGenerator.c
d1f78b7
--- jss-4.2.6/mozilla/security/jss/org/mozilla/jss/pkcs11/PK11KeyPairGenerator.c.cfu	2011-11-10 17:18:02.706421000 -0800
d1f78b7
+++ jss-4.2.6/mozilla/security/jss/org/mozilla/jss/pkcs11/PK11KeyPairGenerator.c	2011-11-10 17:18:23.370442000 -0800
d1f78b7
@@ -195,7 +195,8 @@ JSS_PK11_generateKeyPairWithOpFlags(JNIE
d1f78b7
             }
d1f78b7
             PR_GetErrorText(errBuf);
d1f78b7
         }
d1f78b7
-        msgBuf = PR_smprintf("Keypair Generation failed on token: %s",
d1f78b7
+        msgBuf = PR_smprintf("Keypair Generation failed on token with error: %d : %s",
d1f78b7
+            PR_GetError(),
d1f78b7
             errLength>0? errBuf : "");
d1f78b7
         if(errLength>0) {
d1f78b7
             PR_Free(errBuf);
d1f78b7
diff -up jss-4.2.6/mozilla/security/jss/org/mozilla/jss/pkcs11/PK11KeyWrapper.c.cfu jss-4.2.6/mozilla/security/jss/org/mozilla/jss/pkcs11/PK11KeyWrapper.c
d1f78b7
--- jss-4.2.6/mozilla/security/jss/org/mozilla/jss/pkcs11/PK11KeyWrapper.c.cfu	2011-11-10 17:18:10.767429000 -0800
d1f78b7
+++ jss-4.2.6/mozilla/security/jss/org/mozilla/jss/pkcs11/PK11KeyWrapper.c	2011-11-10 17:52:34.703491000 -0800
d1f78b7
@@ -334,32 +334,36 @@ Java_org_mozilla_jss_pkcs11_PK11KeyWrapp
d1f78b7
     PRBool isExtractable = PR_FALSE;
d1f78b7
 
d1f78b7
     /* special case nethsm and lunasa*/
d1f78b7
-    CK_UTF8CHAR nethsmLabel[4] = {'N','H','S','M'};
d1f78b7
-    CK_UTF8CHAR lunasaLabel[4] = {'l','u','n','a'};
d1f78b7
+    const int numManufacturerIDchars = 7;
d1f78b7
+    CK_UTF8CHAR nethsmManufacturerID[] = {'n','C','i','p','h','e','r'};
d1f78b7
+    CK_UTF8CHAR lunasaManufacturerID[] = {'S','a','f','e','n','e','t'};
d1f78b7
     PRBool isNethsm = PR_TRUE;
d1f78b7
     PRBool isLunasa = PR_TRUE;
d1f78b7
 
d1f78b7
+    tokenInfo.manufacturerID[0] = 0;
d1f78b7
+
d1f78b7
     if( JSS_PK11_getTokenSlotPtr(env, tokenObj, &slot) != PR_SUCCESS) {
d1f78b7
         /* exception was thrown */
d1f78b7
         goto finish;
d1f78b7
     }
d1f78b7
 
d1f78b7
-    if ( PK11_GetTokenInfo(slot, &tokenInfo) == PR_SUCCESS) {
d1f78b7
+    if ( (PK11_GetTokenInfo(slot, &tokenInfo) == PR_SUCCESS) &&
d1f78b7
+       (tokenInfo.manufacturerID[0] != 0)) {
d1f78b7
         int ix = 0;
d1f78b7
-        for(ix=0; ix < 4; ix++) {
d1f78b7
-            if (tokenInfo.label[ix] != nethsmLabel[ix]) {
d1f78b7
+
d1f78b7
+        for(ix=0; ix < numManufacturerIDchars; ix++) {
d1f78b7
+            if (tokenInfo.manufacturerID[ix] != nethsmManufacturerID[ix]) {
d1f78b7
                isNethsm = PR_FALSE;
d1f78b7
                break;
d1f78b7
             }
d1f78b7
         }
d1f78b7
-        ix = 0;
d1f78b7
-        for(ix=0; ix < 4; ix++) {
d1f78b7
-            if (tokenInfo.label[ix] != lunasaLabel[ix]) {
d1f78b7
+
d1f78b7
+        for(ix=0; ix < numManufacturerIDchars; ix++) {
d1f78b7
+            if (tokenInfo.manufacturerID[ix] != lunasaManufacturerID[ix]) {
d1f78b7
                isLunasa = PR_FALSE;
d1f78b7
                break;
d1f78b7
             }
d1f78b7
         }
d1f78b7
-
d1f78b7
     } else {
d1f78b7
         isNethsm = PR_FALSE;
d1f78b7
         isLunasa = PR_FALSE;