2933 compiler warning gags need better granularityReviewed by: Eric Schrock <eric.schrock@delphix.com>Approved by: Garrett D'Amore <garrett@damore.org>
6 Need open kcfdReviewed by: gwr@nexenta.com, richlowe@richlowe.net, matt@greenviolet.netApproved by: richlowe@richlowe.net
6974684 libpkcs11 performance can be improved with less restrictive dlopen() flags6975112 libpkcs11 shouldn't try to dlclose its own metaslot
6959099 T2 Crypto Drivers (ncp, n2cp, n2rng) need to implement self tests for FIPS 140-2 compliance
6970482 cryptoadm cores when listing CKM_AES_CBC mechanism
6927569 cryptoadm unload doesn't perform as expected on freshly-installed systems
6910806 Remove warning after enabling fips by cryptoadm
6862532 "cryptoadm: failed to parse configuration" error6353443 domestic (crypt) source build leaves stuff it shouldn't6818180 mac(1) printed "invalid key" error message when user input an invalid
6862532 "cryptoadm: failed to parse configuration" error6353443 domestic (crypt) source build leaves stuff it shouldn't6818180 mac(1) printed "invalid key" error message when user input an invalid passphrase
show more ...
6897371 cryptoadm needs changes in order to support fips-140 mode in local zones6897374 Memory leaking in kernel algorithm modules and softtoken dsa with fips enabled
PSARC/2009/447 Kernel Cryptographic Framework support for FIPS 140-26703950 Solaris cryptographic framework needs to implement changes for FIPS-140-2 compliance
PSARC 2009/347 cryptoadm(1M) enhancement for FIPS-140 mode6787364 Administration and policy configuration changes to support FIPS 140-26867384 Solaris Crypto Framework needs to implement self tests
PSARC 2009/347 cryptoadm(1M) enhancement for FIPS-140 mode6787364 Administration and policy configuration changes to support FIPS 140-26867384 Solaris Crypto Framework needs to implement self tests for FIPS 140-2 compliance
6778683 Duplicate entries created in kcf.conf after disabling/enabling provider mechanisms by cryptoadm
6449514 move OpenSSL from /usr/sfw to /usr, /lib6457487 clean up Makefile for cmd/openssl6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign
6449514 move OpenSSL from /usr/sfw to /usr, /lib6457487 clean up Makefile for cmd/openssl6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/6746700122 cryptosvc should be able to start before filesystem/usr
6414175 kcf.conf's supportedlist not providing much usefulness
6621176 $SRC/cmd/cmd-crypto/cryptoadm/*.c seem to have syntax errors in the translation notes
6195393 funny display of the PIN length for PIN-less PKCS#11 tokens
backout 6449514/6686002/6686004/6700122: needs more work
6449514 move OpenSSL from /usr/sfw to /usr, /lib6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674670
6449514 move OpenSSL from /usr/sfw to /usr, /lib6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/6746700122 cryptosvc should be able to start before filesystem/usr
6723237 libcryptoutil should allow mechanism number "0x80000000" (the value of marker CKM_VENDOR_DEFINED)
4947627 improve libcrypto string/mechanism conversion functions in edge cases5031131 perf: pkcs11_kernel can benefit from a more efficient pkcs11_mech2str()
6683064 check_rtime could do with some spring cleaning
PSARC 2005/074 Solaris Key Management Framework6224192 Solaris needs unified key management interfaces--HG--rename : usr/src/cmd/cmd-crypto/pktool/biginteger.h => deleted_files/usr/src/cmd/cmd-cr
PSARC 2005/074 Solaris Key Management Framework6224192 Solaris needs unified key management interfaces--HG--rename : usr/src/cmd/cmd-crypto/pktool/biginteger.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/biginteger.hrename : usr/src/cmd/cmd-crypto/pktool/derparse.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/derparse.crename : usr/src/cmd/cmd-crypto/pktool/derparse.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/derparse.hrename : usr/src/cmd/cmd-crypto/pktool/osslcommon.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/osslcommon.crename : usr/src/cmd/cmd-crypto/pktool/osslcommon.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/osslcommon.hrename : usr/src/cmd/cmd-crypto/pktool/p12common.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/p12common.crename : usr/src/cmd/cmd-crypto/pktool/p12common.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/p12common.h
6474874 cryptoadm(1M) silently re-enables random number operations
6420245 SUNWcryr postinstall fails to run cryptoadm and ipsecalgs for default case6424901 cryptoadm refresh fails to update the kernel state in some cases
6258938 cryptoadm can create mechanism names containing space characters6353342 pkcs11_kernel leaks RSA public key objects6352877 ckpi_004 - CKM_AES_ECB mechanism test is failing with lots of Crypt
6258938 cryptoadm can create mechanism names containing space characters6353342 pkcs11_kernel leaks RSA public key objects6352877 ckpi_004 - CKM_AES_ECB mechanism test is failing with lots of Crypto error 29 messages
12