5591 initialisation inversion of component order in cmd-crypto/elfsign.c5620 cstyle updates for cmd/cmd-crypto and lib/libkmfReviewed by: Dan McDonald <danmcd@omniti.com>Reviewed by: David Höppner
5591 initialisation inversion of component order in cmd-crypto/elfsign.c5620 cstyle updates for cmd/cmd-crypto and lib/libkmfReviewed by: Dan McDonald <danmcd@omniti.com>Reviewed by: David Höppner <0xffea@gmail.com>Reviewed by: Josef "Jeff" Sipek <jeffpc@josefsipek.net>Approved by: Dan McDonald <danmcd@omniti.com>
show more ...
3915 Add adjuncts support to the buildReviewed by: Robert Mustacchi <rm@joyent.com>Reviewed by: Richard Lowe <richlowe@richlowe.net>Approved by: Dan McDonald <danmcd@nexenta.com>
2933 compiler warning gags need better granularityReviewed by: Eric Schrock <eric.schrock@delphix.com>Approved by: Garrett D'Amore <garrett@damore.org>
2077 lots of unreachable breaks in illumos gateReviewed by: Dan McDonald <danmcd@nexenta.com>Reviewed by: Garrett D'Amore <garrett@damore.org>Approved by: Richard Lowe <richlowe@richlowe.net>
6954451 pktool list does not pass user creds to KMF correctly
6944179 kmf_sign_cert needs more info about signing algorithm6944121 KMF should add Basic-Constraint when keyCertSign EKU is set6943253 pktool should ask to overwrite a CSR file if it already exist
6944179 kmf_sign_cert needs more info about signing algorithm6944121 KMF should add Basic-Constraint when keyCertSign EKU is set6943253 pktool should ask to overwrite a CSR file if it already exists6943234 pktool online help wrongly suggests we can delete a key based on its subject-DN6940180 certClass should be called privClass (or just class) in KMFPK11_FindPrikeyByCert()6940146 kmf_sign_data() returns KMF_ERR_INTERNAL but the PKCS#11 plugin returns KMF_ERR_MISSING_ERRCODE6938522 kmf_openssl.so.1 clobbers OpenSSL locking callbacks
PSARC 2010/032 EC and SHA2 for KMF6902640 pktool/KMF needs to support ECDSA keys and certificates6787016 pktool can offer the ability to generate RSA keypairs
6889197 libkmf uses realloc incorrectly6889730 pktool fails to add EKUs to CSR and Cert requests6889224 pktool incorrectly generates SAN
6887337 pktool gencert should use SHA1 instead of MD5
6796585 Array overrun in libkmf6874082 KMF fails to create generic AES keys for NSS6869630 pktool export is broken after CR 6860037 was integrated
6860037 pktool can't find certificate when there is only one on the token6794511 Improved pktool Error Reporting6744775 pktool error message for non-existant file could be better
6847622 Segmentation faults when running pktool in snv_116
6814522 pktool gencert/gencsr should remove keypair if there is an error
PSARC 2008/725 TPM Support6771298 Solaris needs a PKCS11 provider for the TPM6771289 Solaris needs TCG support
6756692 ugly prompt for pkcs11 token pin when using pktool6763087 pktool signcsr dumps core in some conditions due to uninitialized variables.6744183 pktool doesn't accept "KPClientAuth", "KPKdc" o
6756692 ugly prompt for pkcs11 token pin when using pktool6763087 pktool signcsr dumps core in some conditions due to uninitialized variables.6744183 pktool doesn't accept "KPClientAuth", "KPKdc" or "scLogon" as valid ekus
6721979 pktool fails to delete other objects if keys are not found first6721984 pktool must store keys before storing certs when importing into NSS
6710916 pktool needs to report error when "dir" option is present but not necessary
PSARC 2008/306 pktool CLI update (dir option correction)6670712 cert of dsa type with key pair can not signcsr of rsa type, viceversa.6670714 pktool gencert keystore=nss and keytype=dsa FAIL, param
PSARC 2008/306 pktool CLI update (dir option correction)6670712 cert of dsa type with key pair can not signcsr of rsa type, viceversa.6670714 pktool gencert keystore=nss and keytype=dsa FAIL, parameter error6670715 pktool gencsr keystore=nss and token="install" (something not "internal") core dumped6670725 pktool signcsr command fails to update the keyusage values.6699535 pktool operations should not have "dir" option for file-based keystore6700175 fix for 6654080 is not complete
6669251 KMF needs to support empty PINs6669357 KMF pkcs11 incorrectly sets some attributes when creating certificates and keys6679525 [CLI] Subcommands in pktool's help are overtranslated6680520 p
6669251 KMF needs to support empty PINs6669357 KMF pkcs11 incorrectly sets some attributes when creating certificates and keys6679525 [CLI] Subcommands in pktool's help are overtranslated6680520 pktool needs to prompt for PIN more often
PSARC 2008/037 new EKU support for pktool and kmfcfg6648052 pktool(1) could allow certificate signing and verification6652751 kmf_get_kmf_error_str() doesn't know about KMF_ERR_ATTR_NOT_FOUND66540
PSARC 2008/037 new EKU support for pktool and kmfcfg6648052 pktool(1) could allow certificate signing and verification6652751 kmf_get_kmf_error_str() doesn't know about KMF_ERR_ATTR_NOT_FOUND6654080 kmf_verify_data() should use algorithm from the cert if KMF_ALGORITHM_INDEX_ATTR is missing6654205 kmf_find_prikey_by_cert() should be public6654910 kmf_validate_cert() won't get over non-existent x509v3 extensions in TA6660235 Command summary on pktool help should be localizable.6660622 KMF needs API to determine format of raw data
6643206 pktool should check for all keys when exporting objtype=key
6634339 kmf_find_key returns error when searching for raw (RSA) public key
PSARC 2007/604 KMF Pluggability Enhancements6621224 KMF Dynamic Plugin Support6621231 pktool list keystore=file dir=/tmp/test prints out incorrect output
6620497 KMF does not build proper PKCS12 PDUs6624214 kmf_get_cert_extn can leak memory6629477 libkmf is crashed in OpenSSL_StoreKey if keytype is not KMF_RSA or KMF_DSA
6612107 pktool list objtype=cert Serial: oddity6612173 pktool interactive mode should ask more questions6612636 pktool delete is inconsistent6613494 pktool fails creation outkey = in dir= if there
6612107 pktool list objtype=cert Serial: oddity6612173 pktool interactive mode should ask more questions6612636 pktool delete is inconsistent6613494 pktool fails creation outkey = in dir= if there is a file/dir in current dir of same name
12