PSARC 2010/269 KMF Certificate Validation Enhancements
6963018 kmf_validate_cert should put more flags into the output attribute in case of an error
6939226 allow one KMF session to choose from multi

PSARC 2010/269 KMF Certificate Validation Enhancements
6963018 kmf_validate_cert should put more flags into the output attribute in case of an error
6939226 allow one KMF session to choose from multiple trusted anchors to validate a certificate

show more ...

6964517 OSnet mapfiles should use version 2 link-editor syntax (2nd pass)
6948720 SHT_INIT_ARRAY etc. section names don't follow ELF gABI
6962343 sgsmsg should use mkstemp() for temporary file creati

6964517 OSnet mapfiles should use version 2 link-editor syntax (2nd pass)
6948720 SHT_INIT_ARRAY etc. section names don't follow ELF gABI
6962343 sgsmsg should use mkstemp() for temporary file creation

show more ...

6916796 OSnet mapfiles should use version 2 link-editor syntax

6961704 KMF generates certificates with bad signatures

PSARC/2010/177 KMF Certificate Name mapping extensions
PSARC/2010/178 KMF Common Name Mapper
6942888 KMF should provide certificate to name mapping capabilities
6949176 KMF cert-to-name mapping frame

PSARC/2010/177 KMF Certificate Name mapping extensions
PSARC/2010/178 KMF Common Name Mapper
6942888 KMF should provide certificate to name mapping capabilities
6949176 KMF cert-to-name mapping framework needs a CN mapper

show more ...

6944179 kmf_sign_cert needs more info about signing algorithm
6944121 KMF should add Basic-Constraint when keyCertSign EKU is set
6943253 pktool should ask to overwrite a CSR file if it already exist

6944179 kmf_sign_cert needs more info about signing algorithm
6944121 KMF should add Basic-Constraint when keyCertSign EKU is set
6943253 pktool should ask to overwrite a CSR file if it already exists
6943234 pktool online help wrongly suggests we can delete a key based on its subject-DN
6940180 certClass should be called privClass (or just class) in KMFPK11_FindPrikeyByCert()
6940146 kmf_sign_data() returns KMF_ERR_INTERNAL but the PKCS#11 plugin returns KMF_ERR_MISSING_ERRCODE
6938522 kmf_openssl.so.1 clobbers OpenSSL locking callbacks

show more ...

PSARC 2010/032 EC and SHA2 for KMF
6902640 pktool/KMF needs to support ECDSA keys and certificates
6787016 pktool can offer the ability to generate RSA keypairs

6864896 libkmf leaks memory

6914632 libkmf has unused functions that should be removed
6914613 libelfsign still uses deprecated libkmf API

6894056 libc is not clean
6894060 libnsl is not lint clean
6894068 libpool is not lint clean
6894073 some zone libs are not lint clean
6913623 some user land components of ON are not ss12u1 lint clean

6904179 kcfd dies under the tender mercies of libumem

6889197 libkmf uses realloc incorrectly
6889730 pktool fails to add EKUs to CSR and Cert requests
6889224 pktool incorrectly generates SAN

6887337 pktool gencert should use SHA1 instead of MD5

6796585 Array overrun in libkmf
6874082 KMF fails to create generic AES keys for NSS
6869630 pktool export is broken after CR 6860037 was integrated

6852240 libelfsign should use pkcs11_softtoken instead of OpenSSL for FIPS-140 integrity checking
6851814 tools elfsign is unnecessarily linked against pkcs11_softtoken

6855407 kernel crypto module reports firmware version incorrectly
6854979 kmf_pkcs11.so.1 has bad SONAME and versioning

6806387 Move OpenSSL from ON to SFW

PSARC 2008/725 TPM Support
6771298 Solaris needs a PKCS11 provider for the TPM
6771289 Solaris needs TCG support

6798660 Cadmium .NOT file processing problem with CWD relative file paths
Contributed by Richard Lowe
6785284 Mapfile versioning rules need to be more visible to gatelings
6800164 Standard file exclu

6798660 Cadmium .NOT file processing problem with CWD relative file paths
Contributed by Richard Lowe
6785284 Mapfile versioning rules need to be more visible to gatelings
6800164 Standard file exclusion mechanism needed for Cadmium tools

show more ...

6449514 move OpenSSL from /usr/sfw to /usr, /lib
6457487 clean up Makefile for cmd/openssl
6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674
6686004 move libcryptoutil and libelfsign

6449514 move OpenSSL from /usr/sfw to /usr, /lib
6457487 clean up Makefile for cmd/openssl
6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674
6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674
6700122 cryptosvc should be able to start before filesystem/usr

show more ...

6756692 ugly prompt for pkcs11 token pin when using pktool
6763087 pktool signcsr dumps core in some conditions due to uninitialized variables.
6744183 pktool doesn't accept "KPClientAuth", "KPKdc" o

6756692 ugly prompt for pkcs11 token pin when using pktool
6763087 pktool signcsr dumps core in some conditions due to uninitialized variables.
6744183 pktool doesn't accept "KPClientAuth", "KPKdc" or "scLogon" as valid ekus

show more ...

6737647 token name matching logic in KMF is broken

backout 6449514/6686002/6686004/6700122: needs more work

6449514 move OpenSSL from /usr/sfw to /usr, /lib
6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674
6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674
670

6449514 move OpenSSL from /usr/sfw to /usr, /lib
6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674
6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674
6700122 cryptosvc should be able to start before filesystem/usr

show more ...

PSARC 2008/306 pktool CLI update (dir option correction)
6670712 cert of dsa type with key pair can not signcsr of rsa type, viceversa.
6670714 pktool gencert keystore=nss and keytype=dsa FAIL, param

PSARC 2008/306 pktool CLI update (dir option correction)
6670712 cert of dsa type with key pair can not signcsr of rsa type, viceversa.
6670714 pktool gencert keystore=nss and keytype=dsa FAIL, parameter error
6670715 pktool gencsr keystore=nss and token="install" (something not "internal") core dumped
6670725 pktool signcsr command fails to update the keyusage values.
6699535 pktool operations should not have "dir" option for file-based keystore
6700175 fix for 6654080 is not complete

show more ...