1667 pkcs11 may deadlock when multi-threaded consumers forkReviewed by: Garrett D'Amore <garrett@damore.org>Reviewed by: Saso Kiselkov <skiselkov.ml@gmail.com>Approved by: Gordon Ross <gordon.ross
1667 pkcs11 may deadlock when multi-threaded consumers forkReviewed by: Garrett D'Amore <garrett@damore.org>Reviewed by: Saso Kiselkov <skiselkov.ml@gmail.com>Approved by: Gordon Ross <gordon.ross@nexenta.com>
show more ...
2933 compiler warning gags need better granularityReviewed by: Eric Schrock <eric.schrock@delphix.com>Approved by: Garrett D'Amore <garrett@damore.org>
2077 lots of unreachable breaks in illumos gateReviewed by: Dan McDonald <danmcd@nexenta.com>Reviewed by: Garrett D'Amore <garrett@damore.org>Approved by: Richard Lowe <richlowe@richlowe.net>
6 Need open kcfdReviewed by: gwr@nexenta.com, richlowe@richlowe.net, matt@greenviolet.netApproved by: richlowe@richlowe.net
6916796 OSnet mapfiles should use version 2 link-editor syntax--HG--rename : usr/src/cmd/sgs/libelf/common/mapfile-common => usr/src/cmd/sgs/libelf/common/mapfile-versrename : usr/src/cmd/sgs/lin
6916796 OSnet mapfiles should use version 2 link-editor syntax--HG--rename : usr/src/cmd/sgs/libelf/common/mapfile-common => usr/src/cmd/sgs/libelf/common/mapfile-versrename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-bindings => usr/src/cmd/sgs/link_audit/common/mapfile-vers-bindingsrename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-perfcnt => usr/src/cmd/sgs/link_audit/common/mapfile-vers-perfcntrename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-symbindrep => usr/src/cmd/sgs/link_audit/common/mapfile-vers-symbindreprename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-truss => usr/src/cmd/sgs/link_audit/common/mapfile-vers-trussrename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-who => usr/src/cmd/sgs/link_audit/common/mapfile-vers-whorename : usr/src/common/mapfiles/i386/map.noexdata => usr/src/common/mapfiles/common/map.noexdatarename : usr/src/lib/libaio/sparc/mapfile-vers => usr/src/lib/libaio/common/mapfile-versrename : usr/src/lib/libelfsign/common/mapfile.map => usr/src/lib/libelfsign/common/mapfile-versrename : usr/src/lib/libpthread/sparc/mapfile-vers => usr/src/lib/libpthread/common/mapfile-versrename : usr/src/lib/librt/amd64/mapfile-vers => usr/src/lib/librt/common/mapfile-versrename : usr/src/lib/libsys/sparc/mapfile-vers => usr/src/lib/libsys/common/mapfile-versrename : usr/src/lib/libthread/sparc/mapfile-vers => usr/src/lib/libthread/common/mapfile-vers
6960928 Race conditions in PKCS#11 random routines in libcryptoutil
PSARC/2010/188 PKCS#11 URI parser for libcryptoutil6924687 teach libcryptoutil to parse a PKCS#11 URI
6897371 cryptoadm needs changes in order to support fips-140 mode in local zones6897374 Memory leaking in kernel algorithm modules and softtoken dsa with fips enabled
6883089 The changes made to pkcs11_softtoken.so in snv_124 cause many crypto failures on local zones
PSARC 2009/347 cryptoadm(1M) enhancement for FIPS-140 mode6787364 Administration and policy configuration changes to support FIPS 140-26867384 Solaris Crypto Framework needs to implement self tests
PSARC 2009/347 cryptoadm(1M) enhancement for FIPS-140 mode6787364 Administration and policy configuration changes to support FIPS 140-26867384 Solaris Crypto Framework needs to implement self tests for FIPS 140-2 compliance
6439989 CKM_CMS_SIG & WTLS missing from pkcs11_mech2str mapping6282064 C_GetSlotInfo returns CKR_SLOT_ID_INVALID when the logical provider is the only slot on the system6177650 Wrong error code ret
6439989 CKM_CMS_SIG & WTLS missing from pkcs11_mech2str mapping6282064 C_GetSlotInfo returns CKR_SLOT_ID_INVALID when the logical provider is the only slot on the system6177650 Wrong error code returned when key does not allow requested operation6437677 C_GenerateKey with missing CKA_VALUE_LEN attr should fail with CKR_TEMPLATE_INCOMPLETE6499687 softDSA.c should use a meaningful #define rather than a hard coded number6773550 Crypto Framework is too strict when checking DSA key parameters6815120 C_Logout with metaslot can leave metaslot object info in memory6606384 SCF consumers crash after mechanisms are disabled using cryptoadm when using libumem6636169 softtoken is confused by .nfs files6636960 C_GetOperationState should fail if there is no active digest operation6627939 functional test failure - got CKR_UNWRAPPING_KEY_TYPE_INCONSISTENT
6666204 meta slot opens and closes /dev/urandom needlessly for every read6722460 finish moving /dev/random and /dev/urandom seeding and usage to libcryptoutil
6784451 consolidate duplicative looping_read() and looping_write() code into libcryptoutil
6798660 Cadmium .NOT file processing problem with CWD relative file pathsContributed by Richard Lowe6785284 Mapfile versioning rules need to be more visible to gatelings6800164 Standard file exclu
6798660 Cadmium .NOT file processing problem with CWD relative file pathsContributed by Richard Lowe6785284 Mapfile versioning rules need to be more visible to gatelings6800164 Standard file exclusion mechanism needed for Cadmium tools
6698202 encrypt(1)/mac(1) should prompt twice for the passphrase
6773289 libcryptoutil needs to interact with calling functions better
6449514 move OpenSSL from /usr/sfw to /usr, /lib6457487 clean up Makefile for cmd/openssl6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign
6449514 move OpenSSL from /usr/sfw to /usr, /lib6457487 clean up Makefile for cmd/openssl6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/6746700122 cryptosvc should be able to start before filesystem/usr
backout 6449514/6686002/6686004/6700122: needs more work
6449514 move OpenSSL from /usr/sfw to /usr, /lib6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674670
6449514 move OpenSSL from /usr/sfw to /usr, /lib6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/6746700122 cryptosvc should be able to start before filesystem/usr
6723237 libcryptoutil should allow mechanism number "0x80000000" (the value of marker CKM_VENDOR_DEFINED)
4947627 improve libcrypto string/mechanism conversion functions in edge cases5031131 perf: pkcs11_kernel can benefit from a more efficient pkcs11_mech2str()
6665460 move random and nonzero random funcs out of pkcs11 to libcryptoutil6665548 convert pkcs11 mechanism to corresponding key generation mechanism
6474964 cryptoadm(1M) displays duplicate mechanisms for hardware providers6545665 make CKM_AES_CTR available to non-kernel users
6552557 provide helper function that generates pkcs#5 keys from passphrases6554395 consolidate duplicated code in decrypt and digest6607990 SUNW_C_KeyToObject fails to set wrap/unwrap capability on
6552557 provide helper function that generates pkcs#5 keys from passphrases6554395 consolidate duplicated code in decrypt and digest6607990 SUNW_C_KeyToObject fails to set wrap/unwrap capability on object created from raw key6607994 SUNW_C_KeyToObject looks like it may destroy an object that was never created6607998 C_GetSessionInfo never returns CKR_ARGUMENTS_BAD6608391 consolidate code that reads key data from file
PSARC 2005/074 Solaris Key Management Framework6224192 Solaris needs unified key management interfaces--HG--rename : usr/src/cmd/cmd-crypto/pktool/biginteger.h => deleted_files/usr/src/cmd/cmd-cr
PSARC 2005/074 Solaris Key Management Framework6224192 Solaris needs unified key management interfaces--HG--rename : usr/src/cmd/cmd-crypto/pktool/biginteger.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/biginteger.hrename : usr/src/cmd/cmd-crypto/pktool/derparse.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/derparse.crename : usr/src/cmd/cmd-crypto/pktool/derparse.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/derparse.hrename : usr/src/cmd/cmd-crypto/pktool/osslcommon.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/osslcommon.crename : usr/src/cmd/cmd-crypto/pktool/osslcommon.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/osslcommon.hrename : usr/src/cmd/cmd-crypto/pktool/p12common.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/p12common.crename : usr/src/cmd/cmd-crypto/pktool/p12common.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/p12common.h
12