6773289 libcryptoutil needs to interact with calling functions better
6778683 Duplicate entries created in kcf.conf after disabling/enabling provider mechanisms by cryptoadm
6449514 move OpenSSL from /usr/sfw to /usr, /lib6457487 clean up Makefile for cmd/openssl6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign
6449514 move OpenSSL from /usr/sfw to /usr, /lib6457487 clean up Makefile for cmd/openssl6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/6746700122 cryptosvc should be able to start before filesystem/usr
show more ...
6756692 ugly prompt for pkcs11 token pin when using pktool6763087 pktool signcsr dumps core in some conditions due to uninitialized variables.6744183 pktool doesn't accept "KPClientAuth", "KPKdc" o
6756692 ugly prompt for pkcs11 token pin when using pktool6763087 pktool signcsr dumps core in some conditions due to uninitialized variables.6744183 pktool doesn't accept "KPClientAuth", "KPKdc" or "scLogon" as valid ekus
6414175 kcf.conf's supportedlist not providing much usefulness
6621176 $SRC/cmd/cmd-crypto/cryptoadm/*.c seem to have syntax errors in the translation notes
6195393 funny display of the PIN length for PIN-less PKCS#11 tokens
backout 6449514/6686002/6686004/6700122: needs more work
6449514 move OpenSSL from /usr/sfw to /usr, /lib6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674670
6449514 move OpenSSL from /usr/sfw to /usr, /lib6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/6746700122 cryptosvc should be able to start before filesystem/usr
6721979 pktool fails to delete other objects if keys are not found first6721984 pktool must store keys before storing certs when importing into NSS
6723237 libcryptoutil should allow mechanism number "0x80000000" (the value of marker CKM_VENDOR_DEFINED)
4947627 improve libcrypto string/mechanism conversion functions in edge cases5031131 perf: pkcs11_kernel can benefit from a more efficient pkcs11_mech2str()
6715059 elfsign displays a char* as a number
6710916 pktool needs to report error when "dir" option is present but not necessary
PSARC 2008/306 pktool CLI update (dir option correction)6670712 cert of dsa type with key pair can not signcsr of rsa type, viceversa.6670714 pktool gencert keystore=nss and keytype=dsa FAIL, param
PSARC 2008/306 pktool CLI update (dir option correction)6670712 cert of dsa type with key pair can not signcsr of rsa type, viceversa.6670714 pktool gencert keystore=nss and keytype=dsa FAIL, parameter error6670715 pktool gencsr keystore=nss and token="install" (something not "internal") core dumped6670725 pktool signcsr command fails to update the keyusage values.6699535 pktool operations should not have "dir" option for file-based keystore6700175 fix for 6654080 is not complete
6683064 check_rtime could do with some spring cleaning
6418676 encrypt(1) and decrypt(1) could benefit from being 64-bit programs
6669251 KMF needs to support empty PINs6669357 KMF pkcs11 incorrectly sets some attributes when creating certificates and keys6679525 [CLI] Subcommands in pktool's help are overtranslated6680520 p
6669251 KMF needs to support empty PINs6669357 KMF pkcs11 incorrectly sets some attributes when creating certificates and keys6679525 [CLI] Subcommands in pktool's help are overtranslated6680520 pktool needs to prompt for PIN more often
6652716 Need an ARCFOUR implementation optimized for Intel EM64T6658907 digest(1) and mac(1) could benefit from being 64-bit programs6665607 Need a SHA256/SHA384/SHA512 implementation optimized for
6652716 Need an ARCFOUR implementation optimized for Intel EM64T6658907 digest(1) and mac(1) could benefit from being 64-bit programs6665607 Need a SHA256/SHA384/SHA512 implementation optimized for 64-bit x86--HG--rename : usr/src/common/crypto/arcfour/amd64/arcfour_crypt_amd64.s => deleted_files/usr/src/common/crypto/arcfour/amd64/arcfour_crypt_amd64.s
PSARC 2008/037 new EKU support for pktool and kmfcfg6648052 pktool(1) could allow certificate signing and verification6652751 kmf_get_kmf_error_str() doesn't know about KMF_ERR_ATTR_NOT_FOUND66540
PSARC 2008/037 new EKU support for pktool and kmfcfg6648052 pktool(1) could allow certificate signing and verification6652751 kmf_get_kmf_error_str() doesn't know about KMF_ERR_ATTR_NOT_FOUND6654080 kmf_verify_data() should use algorithm from the cert if KMF_ALGORITHM_INDEX_ATTR is missing6654205 kmf_find_prikey_by_cert() should be public6654910 kmf_validate_cert() won't get over non-existent x509v3 extensions in TA6660235 Command summary on pktool help should be localizable.6660622 KMF needs API to determine format of raw data
6649721 elfsign sign/verify with missing certificate can dump core
6643206 pktool should check for all keys when exporting objtype=key
PSARC 2007/446 Elliptic-Curve Cryptography for Solaris5066901 Offer the PKCS#11 Elliptic Curve based mechanisms in Solaris6562402 kernel software provider for Elliptic Curve mechanisms
6634339 kmf_find_key returns error when searching for raw (RSA) public key
PSARC 2007/604 KMF Pluggability Enhancements6621224 KMF Dynamic Plugin Support6621231 pktool list keystore=file dir=/tmp/test prints out incorrect output
12345