6961070 kssl should send close_notify on socket shutdown
6949092 create_instance_name() leaks instance_name

6939100 convert KSSL into a socket filter

6947183 kssl generates invalid SSL records in response to SSLv2-only Client Hello messages

6940069 KSSL should advertise secure renegotiation awareness
6911323 the ksslcfg create command should fail immediately when the ssl port is missing
6911304 ksslcfg should do more strict checks on th

6940069 KSSL should advertise secure renegotiation awareness
6911323 the ksslcfg create command should fail immediately when the ssl port is missing
6911304 ksslcfg should do more strict checks on the proxy port and ssl port

show more ...

6228975 Need IPv6 support for KSSL
6627569 need kssl_sid_cached kstat counter
6846333 ksslcfg no longer displays version
6668826 missing curly brackets in kssl_release_ent
6873066 cleanup unused code

6228975 Need IPv6 support for KSSL
6627569 need kssl_sid_cached kstat counter
6846333 ksslcfg no longer displays version
6668826 missing curly brackets in kssl_release_ent
6873066 cleanup unused code in ksslproto.h and ksslapi.h

show more ...

6836329 KSSL should handle bind time checks for IPv4-mapped IPv6 addresses

6556447 better observability for kssl
6614159 kstrgetmsg()/struiocopyout() are greedy monsters lurking for raw kssl data
6641496 incoming TCP segments destined for KSSL lost when received out-of-order

6578428 kssl_input() clears DBLK_COOKED flag in the wrong field
6578997 KSSL should use hardware acceleration for ssl3 macs when available

6497668 need sanity checks in the incoming data path
6539337 prevmp in kssl_handle_record() mis-initialized
6556443 tcp should not be eating SSL records intended for kssl

6364043 kssl shouldn't submit non multiple of the cipher's block size for decryption

PSARC/2005/625 Greyhound - Solaris Kernel SSL proxy
4931229 Kernel-level SSL proxy