6715 Remove MD2 from libkmfReviewed by: Peter Tribble <peter.tribble@gmail.com>Reviewed by: Igor Kozhukhov <ikozhukhov@gmail.com>Reviewed by: Saso Kiselkov <skiselkov.ml@gmail.com>Approved by: Ga
6715 Remove MD2 from libkmfReviewed by: Peter Tribble <peter.tribble@gmail.com>Reviewed by: Igor Kozhukhov <ikozhukhov@gmail.com>Reviewed by: Saso Kiselkov <skiselkov.ml@gmail.com>Approved by: Garrett D'Amore <garrett@damore.org>
show more ...
5878 Additional lint fixes for sunstudio12.1 and more modern OpenSSLReviewed by: Dan McDonald <danmcd@omniti.com>Reviewed by: Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org>Approved by: Gordon Ros
5878 Additional lint fixes for sunstudio12.1 and more modern OpenSSLReviewed by: Dan McDonald <danmcd@omniti.com>Reviewed by: Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org>Approved by: Gordon Ross <gordon.w.ross@gmail.com>
5591 initialisation inversion of component order in cmd-crypto/elfsign.c5620 cstyle updates for cmd/cmd-crypto and lib/libkmfReviewed by: Dan McDonald <danmcd@omniti.com>Reviewed by: David Höppner
5591 initialisation inversion of component order in cmd-crypto/elfsign.c5620 cstyle updates for cmd/cmd-crypto and lib/libkmfReviewed by: Dan McDonald <danmcd@omniti.com>Reviewed by: David Höppner <0xffea@gmail.com>Reviewed by: Josef "Jeff" Sipek <jeffpc@josefsipek.net>Approved by: Dan McDonald <danmcd@omniti.com>
backout 4853: breaks lint
4853 illumos-gate is not lint-clean when built with openssl 1.0Reviewed by: Keith Wesolowski <keith.wesolowski@joyent.com>Reviewed by: Alexander Eremin <alexander.eremin@nexenta.com>Approved by: R
4853 illumos-gate is not lint-clean when built with openssl 1.0Reviewed by: Keith Wesolowski <keith.wesolowski@joyent.com>Reviewed by: Alexander Eremin <alexander.eremin@nexenta.com>Approved by: Robert Mustacchi <rm@joyent.com>
3915 Add adjuncts support to the buildReviewed by: Robert Mustacchi <rm@joyent.com>Reviewed by: Richard Lowe <richlowe@richlowe.net>Approved by: Dan McDonald <danmcd@nexenta.com>
2933 compiler warning gags need better granularityReviewed by: Eric Schrock <eric.schrock@delphix.com>Approved by: Garrett D'Amore <garrett@damore.org>
1665 Illumos wont build against openssl 1.0.0Reviewed by: Robert Mustacchi <rm@joyent.com>Reviewed by: Keith Wesolowski <keith.wesolowski@joyent.com>Reviewed by: Joshua M. Clulow <josh@sysmgr.org>
1665 Illumos wont build against openssl 1.0.0Reviewed by: Robert Mustacchi <rm@joyent.com>Reviewed by: Keith Wesolowski <keith.wesolowski@joyent.com>Reviewed by: Joshua M. Clulow <josh@sysmgr.org>Approved by: Albert Lee <trisk@nexenta.com>
6916796 OSnet mapfiles should use version 2 link-editor syntax--HG--rename : usr/src/cmd/sgs/libelf/common/mapfile-common => usr/src/cmd/sgs/libelf/common/mapfile-versrename : usr/src/cmd/sgs/lin
6916796 OSnet mapfiles should use version 2 link-editor syntax--HG--rename : usr/src/cmd/sgs/libelf/common/mapfile-common => usr/src/cmd/sgs/libelf/common/mapfile-versrename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-bindings => usr/src/cmd/sgs/link_audit/common/mapfile-vers-bindingsrename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-perfcnt => usr/src/cmd/sgs/link_audit/common/mapfile-vers-perfcntrename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-symbindrep => usr/src/cmd/sgs/link_audit/common/mapfile-vers-symbindreprename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-truss => usr/src/cmd/sgs/link_audit/common/mapfile-vers-trussrename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-who => usr/src/cmd/sgs/link_audit/common/mapfile-vers-whorename : usr/src/common/mapfiles/i386/map.noexdata => usr/src/common/mapfiles/common/map.noexdatarename : usr/src/lib/libaio/sparc/mapfile-vers => usr/src/lib/libaio/common/mapfile-versrename : usr/src/lib/libelfsign/common/mapfile.map => usr/src/lib/libelfsign/common/mapfile-versrename : usr/src/lib/libpthread/sparc/mapfile-vers => usr/src/lib/libpthread/common/mapfile-versrename : usr/src/lib/librt/amd64/mapfile-vers => usr/src/lib/librt/common/mapfile-versrename : usr/src/lib/libsys/sparc/mapfile-vers => usr/src/lib/libsys/common/mapfile-versrename : usr/src/lib/libthread/sparc/mapfile-vers => usr/src/lib/libthread/common/mapfile-vers
6944179 kmf_sign_cert needs more info about signing algorithm6944121 KMF should add Basic-Constraint when keyCertSign EKU is set6943253 pktool should ask to overwrite a CSR file if it already exist
6944179 kmf_sign_cert needs more info about signing algorithm6944121 KMF should add Basic-Constraint when keyCertSign EKU is set6943253 pktool should ask to overwrite a CSR file if it already exists6943234 pktool online help wrongly suggests we can delete a key based on its subject-DN6940180 certClass should be called privClass (or just class) in KMFPK11_FindPrikeyByCert()6940146 kmf_sign_data() returns KMF_ERR_INTERNAL but the PKCS#11 plugin returns KMF_ERR_MISSING_ERRCODE6938522 kmf_openssl.so.1 clobbers OpenSSL locking callbacks
PSARC 2010/032 EC and SHA2 for KMF6902640 pktool/KMF needs to support ECDSA keys and certificates6787016 pktool can offer the ability to generate RSA keypairs
6864896 libkmf leaks memory
6894056 libc is not clean6894060 libnsl is not lint clean6894068 libpool is not lint clean6894073 some zone libs are not lint clean6913623 some user land components of ON are not ss12u1 lint clean
6796585 Array overrun in libkmf6874082 KMF fails to create generic AES keys for NSS6869630 pktool export is broken after CR 6860037 was integrated
6855407 kernel crypto module reports firmware version incorrectly6854979 kmf_pkcs11.so.1 has bad SONAME and versioning
6806387 Move OpenSSL from ON to SFW
PSARC 2008/725 TPM Support6771298 Solaris needs a PKCS11 provider for the TPM6771289 Solaris needs TCG support
6798660 Cadmium .NOT file processing problem with CWD relative file pathsContributed by Richard Lowe6785284 Mapfile versioning rules need to be more visible to gatelings6800164 Standard file exclu
6798660 Cadmium .NOT file processing problem with CWD relative file pathsContributed by Richard Lowe6785284 Mapfile versioning rules need to be more visible to gatelings6800164 Standard file exclusion mechanism needed for Cadmium tools
6449514 move OpenSSL from /usr/sfw to /usr, /lib6457487 clean up Makefile for cmd/openssl6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign
6449514 move OpenSSL from /usr/sfw to /usr, /lib6457487 clean up Makefile for cmd/openssl6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/6746700122 cryptosvc should be able to start before filesystem/usr
backout 6449514/6686002/6686004/6700122: needs more work
6449514 move OpenSSL from /usr/sfw to /usr, /lib6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674670
6449514 move OpenSSL from /usr/sfw to /usr, /lib6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/6746686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/6746700122 cryptosvc should be able to start before filesystem/usr
6494306 need single source for bignum code--HG--rename : usr/src/uts/sun4u/rsa/Makefile => deleted_files/usr/src/uts/sun4u/rsa/Makefilerename : usr/src/uts/sun4u/rsa/mont_mulf.s => usr/src/common
6494306 need single source for bignum code--HG--rename : usr/src/uts/sun4u/rsa/Makefile => deleted_files/usr/src/uts/sun4u/rsa/Makefilerename : usr/src/uts/sun4u/rsa/mont_mulf.s => usr/src/common/bignum/sun4u/mont_mulf_kernel_v9.srename : usr/src/uts/intel/rsa/Makefile.32 => usr/src/uts/intel/bignum/Makefile.32rename : usr/src/uts/intel/rsa/Makefile.64 => usr/src/uts/intel/bignum/Makefile.64
6683064 check_rtime could do with some spring cleaning
6669251 KMF needs to support empty PINs6669357 KMF pkcs11 incorrectly sets some attributes when creating certificates and keys6679525 [CLI] Subcommands in pktool's help are overtranslated6680520 p
6669251 KMF needs to support empty PINs6669357 KMF pkcs11 incorrectly sets some attributes when creating certificates and keys6679525 [CLI] Subcommands in pktool's help are overtranslated6680520 pktool needs to prompt for PIN more often
PSARC 2008/037 new EKU support for pktool and kmfcfg6648052 pktool(1) could allow certificate signing and verification6652751 kmf_get_kmf_error_str() doesn't know about KMF_ERR_ATTR_NOT_FOUND66540
PSARC 2008/037 new EKU support for pktool and kmfcfg6648052 pktool(1) could allow certificate signing and verification6652751 kmf_get_kmf_error_str() doesn't know about KMF_ERR_ATTR_NOT_FOUND6654080 kmf_verify_data() should use algorithm from the cert if KMF_ALGORITHM_INDEX_ATTR is missing6654205 kmf_find_prikey_by_cert() should be public6654910 kmf_validate_cert() won't get over non-existent x509v3 extensions in TA6660235 Command summary on pktool help should be localizable.6660622 KMF needs API to determine format of raw data
12