15290 lib: remove pragma identReviewed by: Garrett D'Amore <garrett@damore.org>Reviewed by: Igor Kozhukhov <igor@dilos.org>Reviewed by: Dan Cross <cross@oxidecomputer.com>Approved by: Patrick Moo
15290 lib: remove pragma identReviewed by: Garrett D'Amore <garrett@damore.org>Reviewed by: Igor Kozhukhov <igor@dilos.org>Reviewed by: Dan Cross <cross@oxidecomputer.com>Approved by: Patrick Mooney <pmooney@pfmooney.com>
show more ...
5159 ipsec_libssl_setup.c loads libcryptoReviewed by: Andy Fiddaman <andy@omniosce.org>Reviewed by: Igor Kozhukhov <igor@dilos.org>Reviewed by: Toomas Soome <tsoome@me.com>Approved by: Dan McDona
5159 ipsec_libssl_setup.c loads libcryptoReviewed by: Andy Fiddaman <andy@omniosce.org>Reviewed by: Igor Kozhukhov <igor@dilos.org>Reviewed by: Toomas Soome <tsoome@me.com>Approved by: Dan McDonald <danmcd@joyent.com>
PSARC 2010/269 KMF Certificate Validation Enhancements6963018 kmf_validate_cert should put more flags into the output attribute in case of an error6939226 allow one KMF session to choose from multi
PSARC 2010/269 KMF Certificate Validation Enhancements6963018 kmf_validate_cert should put more flags into the output attribute in case of an error6939226 allow one KMF session to choose from multiple trusted anchors to validate a certificate
PSARC/2010/177 KMF Certificate Name mapping extensionsPSARC/2010/178 KMF Common Name Mapper6942888 KMF should provide certificate to name mapping capabilities6949176 KMF cert-to-name mapping frame
PSARC/2010/177 KMF Certificate Name mapping extensionsPSARC/2010/178 KMF Common Name Mapper6942888 KMF should provide certificate to name mapping capabilities6949176 KMF cert-to-name mapping framework needs a CN mapper
PSARC 2010/032 EC and SHA2 for KMF6902640 pktool/KMF needs to support ECDSA keys and certificates6787016 pktool can offer the ability to generate RSA keypairs
6914632 libkmf has unused functions that should be removed6914613 libelfsign still uses deprecated libkmf API
PSARC 2008/725 TPM Support6771298 Solaris needs a PKCS11 provider for the TPM6771289 Solaris needs TCG support
6449514 move OpenSSL from /usr/sfw to /usr, /lib6457487 clean up Makefile for cmd/openssl6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign
6449514 move OpenSSL from /usr/sfw to /usr, /lib6457487 clean up Makefile for cmd/openssl6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/6746700122 cryptosvc should be able to start before filesystem/usr
backout 6449514/6686002/6686004/6700122: needs more work
6449514 move OpenSSL from /usr/sfw to /usr, /lib6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674670
6449514 move OpenSSL from /usr/sfw to /usr, /lib6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/6746700122 cryptosvc should be able to start before filesystem/usr
PSARC 2008/306 pktool CLI update (dir option correction)6670712 cert of dsa type with key pair can not signcsr of rsa type, viceversa.6670714 pktool gencert keystore=nss and keytype=dsa FAIL, param
PSARC 2008/306 pktool CLI update (dir option correction)6670712 cert of dsa type with key pair can not signcsr of rsa type, viceversa.6670714 pktool gencert keystore=nss and keytype=dsa FAIL, parameter error6670715 pktool gencsr keystore=nss and token="install" (something not "internal") core dumped6670725 pktool signcsr command fails to update the keyusage values.6699535 pktool operations should not have "dir" option for file-based keystore6700175 fix for 6654080 is not complete
PSARC 2008/037 new EKU support for pktool and kmfcfg6648052 pktool(1) could allow certificate signing and verification6652751 kmf_get_kmf_error_str() doesn't know about KMF_ERR_ATTR_NOT_FOUND66540
PSARC 2008/037 new EKU support for pktool and kmfcfg6648052 pktool(1) could allow certificate signing and verification6652751 kmf_get_kmf_error_str() doesn't know about KMF_ERR_ATTR_NOT_FOUND6654080 kmf_verify_data() should use algorithm from the cert if KMF_ALGORITHM_INDEX_ATTR is missing6654205 kmf_find_prikey_by_cert() should be public6654910 kmf_validate_cert() won't get over non-existent x509v3 extensions in TA6660235 Command summary on pktool help should be localizable.6660622 KMF needs API to determine format of raw data
PSARC 2007/604 KMF Pluggability Enhancements6621224 KMF Dynamic Plugin Support6621231 pktool list keystore=file dir=/tmp/test prints out incorrect output
6620497 KMF does not build proper PKCS12 PDUs6624214 kmf_get_cert_extn can leak memory6629477 libkmf is crashed in OpenSSL_StoreKey if keytype is not KMF_RSA or KMF_DSA
PSARC 2007/426 KMFAPI Interface Taxonomy ChangePSARC 2007/465 pktool symmetric key enhancements6546405 KMF Interfaces need to be extensible6547894 pktool should be more detailed6590232 pktool sho
PSARC 2007/426 KMFAPI Interface Taxonomy ChangePSARC 2007/465 pktool symmetric key enhancements6546405 KMF Interfaces need to be extensible6547894 pktool should be more detailed6590232 pktool should import and export generic keys
6531818 libkmf has too many dependencies on libpkcs116534811 KMF openssl verify routine should test for NULL hash method.6534827 KMF_ReadInputFile should not require a handle
PSARC 2007/094 encrypt(1) / mac(1) token key support4868006 encrypt(1) and mac(1) needs to support token objects6517162 pktool genkey needs to support generic secret key
6523959 KMF needs keystore specific Verify operations--HG--rename : usr/src/lib/libkmf/include/oidsalg.h => deleted_files/usr/src/lib/libkmf/include/oidsalg.h
6525220 KMF_ValidateCert() and KMF_FindCertInCRL() should take a subject certificate as input
6509342 Code licenses for KMF need to be cleaned up.
6501154 kssladm could use KMF--HG--rename : usr/src/cmd/cmd-inet/usr.sbin/kssl/kssladm/openssl_util.c => usr/src/cmd/cmd-inet/usr.sbin/kssl/kssladm/ksslutil.c
PSARC 2005/074 Solaris Key Management Framework6224192 Solaris needs unified key management interfaces--HG--rename : usr/src/cmd/cmd-crypto/pktool/biginteger.h => deleted_files/usr/src/cmd/cmd-cr
PSARC 2005/074 Solaris Key Management Framework6224192 Solaris needs unified key management interfaces--HG--rename : usr/src/cmd/cmd-crypto/pktool/biginteger.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/biginteger.hrename : usr/src/cmd/cmd-crypto/pktool/derparse.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/derparse.crename : usr/src/cmd/cmd-crypto/pktool/derparse.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/derparse.hrename : usr/src/cmd/cmd-crypto/pktool/osslcommon.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/osslcommon.crename : usr/src/cmd/cmd-crypto/pktool/osslcommon.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/osslcommon.hrename : usr/src/cmd/cmd-crypto/pktool/p12common.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/p12common.crename : usr/src/cmd/cmd-crypto/pktool/p12common.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/p12common.h