Trust assertions (old stuff) have a CKA_X_CERTIFICATE_VALUE, not a CKA_VALUE attribute. We've been doing this wrong in the p11-kit trust module.
Created attachment 77191 [details] [review]
Use CKA_X_CERTIFICATE_VALUE for trust assertions
Related to: https://bugzilla.redhat.com/show_bug.cgi?id=928913