6974684 libpkcs11 performance can be improved with less restrictive dlopen() flags
6975112 libpkcs11 shouldn't try to dlclose its own metaslot

6959099 T2 Crypto Drivers (ncp, n2cp, n2rng) need to implement self tests for FIPS 140-2 compliance

PSARC 2010/269 KMF Certificate Validation Enhancements
6963018 kmf_validate_cert should put more flags into the output attribute in case of an error
6939226 allow one KMF session to choose from multi

PSARC 2010/269 KMF Certificate Validation Enhancements
6963018 kmf_validate_cert should put more flags into the output attribute in case of an error
6939226 allow one KMF session to choose from multiple trusted anchors to validate a certificate

show more ...

6970482 cryptoadm cores when listing CKM_AES_CBC mechanism

PSARC 2010/195 PKCS11 KMS Provider
6944296 Solaris needs a PKCS#11 provider to allow access to KMS keystore functionality

PSARC 2009/430 Default system CA (X.509) Certificates
6661895 /etc/sfw/openssl/certs has no well known CA certificates

PSARC/2010/177 KMF Certificate Name mapping extensions
PSARC/2010/178 KMF Common Name Mapper
6942888 KMF should provide certificate to name mapping capabilities
6949176 KMF cert-to-name mapping frame

PSARC/2010/177 KMF Certificate Name mapping extensions
PSARC/2010/178 KMF Common Name Mapper
6942888 KMF should provide certificate to name mapping capabilities
6949176 KMF cert-to-name mapping framework needs a CN mapper

show more ...

6954451 pktool list does not pass user creds to KMF correctly

PSARC/2010/146 EOF unnecessary elfsign and kCF options
6855881 clean up unnecessary technology from elfsign and kcf

6944179 kmf_sign_cert needs more info about signing algorithm
6944121 KMF should add Basic-Constraint when keyCertSign EKU is set
6943253 pktool should ask to overwrite a CSR file if it already exist

6944179 kmf_sign_cert needs more info about signing algorithm
6944121 KMF should add Basic-Constraint when keyCertSign EKU is set
6943253 pktool should ask to overwrite a CSR file if it already exists
6943234 pktool online help wrongly suggests we can delete a key based on its subject-DN
6940180 certClass should be called privClass (or just class) in KMFPK11_FindPrikeyByCert()
6940146 kmf_sign_data() returns KMF_ERR_INTERNAL but the PKCS#11 plugin returns KMF_ERR_MISSING_ERRCODE
6938522 kmf_openssl.so.1 clobbers OpenSSL locking callbacks

show more ...

PSARC 2010/032 EC and SHA2 for KMF
6902640 pktool/KMF needs to support ECDSA keys and certificates
6787016 pktool can offer the ability to generate RSA keypairs

6927569 cryptoadm unload doesn't perform as expected on freshly-installed systems

6910806 Remove warning after enabling fips by cryptoadm

6862532 "cryptoadm: failed to parse configuration" error
6353443 domestic (crypt) source build leaves stuff it shouldn't
6818180 mac(1) printed "invalid key" error message when user input an invalid

6862532 "cryptoadm: failed to parse configuration" error
6353443 domestic (crypt) source build leaves stuff it shouldn't
6818180 mac(1) printed "invalid key" error message when user input an invalid passphrase

show more ...

6857427 remove the unused key and certificate files from the gate

6895727 tpmadm command needs to set prompts correctly for auth command

6897371 cryptoadm needs changes in order to support fips-140 mode in local zones
6897374 Memory leaking in kernel algorithm modules and softtoken dsa with fips enabled

6894413 tpmadm needs more explanation in its error messages

6889197 libkmf uses realloc incorrectly
6889730 pktool fails to add EKUs to CSR and Cert requests
6889224 pktool incorrectly generates SAN

6887337 pktool gencert should use SHA1 instead of MD5

PSARC/2009/447 Kernel Cryptographic Framework support for FIPS 140-2
6703950 Solaris cryptographic framework needs to implement changes for FIPS-140-2 compliance

6606040 elfsign should use new KMF APIs

PSARC 2009/347 cryptoadm(1M) enhancement for FIPS-140 mode
6787364 Administration and policy configuration changes to support FIPS 140-2
6867384 Solaris Crypto Framework needs to implement self tests

PSARC 2009/347 cryptoadm(1M) enhancement for FIPS-140 mode
6787364 Administration and policy configuration changes to support FIPS 140-2
6867384 Solaris Crypto Framework needs to implement self tests for FIPS 140-2 compliance

show more ...

6796585 Array overrun in libkmf
6874082 KMF fails to create generic AES keys for NSS
6869630 pktool export is broken after CR 6860037 was integrated

6855414 Deliver SPARC support for TPM
6865428 pkcs11_tpm should be installed by default, or it won't be used