6916796 OSnet mapfiles should use version 2 link-editor syntax

6960928 Race conditions in PKCS#11 random routines in libcryptoutil

PSARC/2010/188 PKCS#11 URI parser for libcryptoutil
6924687 teach libcryptoutil to parse a PKCS#11 URI

6897371 cryptoadm needs changes in order to support fips-140 mode in local zones
6897374 Memory leaking in kernel algorithm modules and softtoken dsa with fips enabled

6883089 The changes made to pkcs11_softtoken.so in snv_124 cause many crypto failures on local zones

PSARC 2009/347 cryptoadm(1M) enhancement for FIPS-140 mode
6787364 Administration and policy configuration changes to support FIPS 140-2
6867384 Solaris Crypto Framework needs to implement self tests

PSARC 2009/347 cryptoadm(1M) enhancement for FIPS-140 mode
6787364 Administration and policy configuration changes to support FIPS 140-2
6867384 Solaris Crypto Framework needs to implement self tests for FIPS 140-2 compliance

show more ...

6439989 CKM_CMS_SIG & WTLS missing from pkcs11_mech2str mapping
6282064 C_GetSlotInfo returns CKR_SLOT_ID_INVALID when the logical provider is the only slot on the system
6177650 Wrong error code ret

6439989 CKM_CMS_SIG & WTLS missing from pkcs11_mech2str mapping
6282064 C_GetSlotInfo returns CKR_SLOT_ID_INVALID when the logical provider is the only slot on the system
6177650 Wrong error code returned when key does not allow requested operation
6437677 C_GenerateKey with missing CKA_VALUE_LEN attr should fail with CKR_TEMPLATE_INCOMPLETE
6499687 softDSA.c should use a meaningful #define rather than a hard coded number
6773550 Crypto Framework is too strict when checking DSA key parameters
6815120 C_Logout with metaslot can leave metaslot object info in memory
6606384 SCF consumers crash after mechanisms are disabled using cryptoadm when using libumem
6636169 softtoken is confused by .nfs files
6636960 C_GetOperationState should fail if there is no active digest operation
6627939 functional test failure - got CKR_UNWRAPPING_KEY_TYPE_INCONSISTENT

show more ...

6666204 meta slot opens and closes /dev/urandom needlessly for every read
6722460 finish moving /dev/random and /dev/urandom seeding and usage to libcryptoutil

6784451 consolidate duplicative looping_read() and looping_write() code into libcryptoutil

6798660 Cadmium .NOT file processing problem with CWD relative file paths
Contributed by Richard Lowe
6785284 Mapfile versioning rules need to be more visible to gatelings
6800164 Standard file exclu

6798660 Cadmium .NOT file processing problem with CWD relative file paths
Contributed by Richard Lowe
6785284 Mapfile versioning rules need to be more visible to gatelings
6800164 Standard file exclusion mechanism needed for Cadmium tools

show more ...

6698202 encrypt(1)/mac(1) should prompt twice for the passphrase

6773289 libcryptoutil needs to interact with calling functions better

6449514 move OpenSSL from /usr/sfw to /usr, /lib
6457487 clean up Makefile for cmd/openssl
6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674
6686004 move libcryptoutil and libelfsign

6449514 move OpenSSL from /usr/sfw to /usr, /lib
6457487 clean up Makefile for cmd/openssl
6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674
6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674
6700122 cryptosvc should be able to start before filesystem/usr

show more ...

backout 6449514/6686002/6686004/6700122: needs more work

6449514 move OpenSSL from /usr/sfw to /usr, /lib
6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674
6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674
670

6449514 move OpenSSL from /usr/sfw to /usr, /lib
6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674
6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674
6700122 cryptosvc should be able to start before filesystem/usr

show more ...

6723237 libcryptoutil should allow mechanism number "0x80000000" (the value of marker CKM_VENDOR_DEFINED)

4947627 improve libcrypto string/mechanism conversion functions in edge cases
5031131 perf: pkcs11_kernel can benefit from a more efficient pkcs11_mech2str()

6665460 move random and nonzero random funcs out of pkcs11 to libcryptoutil
6665548 convert pkcs11 mechanism to corresponding key generation mechanism

6474964 cryptoadm(1M) displays duplicate mechanisms for hardware providers
6545665 make CKM_AES_CTR available to non-kernel users

6552557 provide helper function that generates pkcs#5 keys from passphrases
6554395 consolidate duplicated code in decrypt and digest
6607990 SUNW_C_KeyToObject fails to set wrap/unwrap capability on

6552557 provide helper function that generates pkcs#5 keys from passphrases
6554395 consolidate duplicated code in decrypt and digest
6607990 SUNW_C_KeyToObject fails to set wrap/unwrap capability on object created from raw key
6607994 SUNW_C_KeyToObject looks like it may destroy an object that was never created
6607998 C_GetSessionInfo never returns CKR_ARGUMENTS_BAD
6608391 consolidate code that reads key data from file

show more ...

PSARC 2005/074 Solaris Key Management Framework
6224192 Solaris needs unified key management interfaces

6479976 mechanism number to name mapping is ambiguous for 1040

6357230 specfiles should be nuked