summaryrefslogtreecommitdiff
path: root/usr/src/cmd/cmd-crypto/pktool
AgeCommit message (Collapse)AuthorFilesLines
2019-08-1611528 Makefile.noget can get goneJohn Levon1-1/+1
11529 Use -Wno-maybe-initialized Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Robert Mustacchi <rm@joyent.com>
2019-07-0911304 cmd-crypto: NULL pointer errorsToomas Soome5-12/+12
Reviewed by: Garrett D'Amore <garrett@damore.org> Approved by: Dan McDonald <danmcd@joyent.com>
2019-01-1410080 smatch Makefile changes for usr/src/cmdJohn Levon1-1/+5
Reviewed by: Andy Fiddaman <andy@omniosce.org> Approved by: Robert Mustacchi <rm@joyent.com>
2018-12-0510020 cmd-crypto: macro expands to multiple statementsToomas Soome1-7/+8
Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: C Fraire <cfraire@me.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2017-05-118193 pktool: misleading-indentationToomas Soome1-53/+53
Reviewed by: Andrew Stormont <andyjstormont@gmail.com> Reviewed by: Marcel Telka <marcel@telka.sk> Approved by: Richard Lowe <richlowe@richlowe.net>
2015-02-165591 initialisation inversion of component order in cmd-crypto/elfsign.cRichard PALO12-43/+41
5620 cstyle updates for cmd/cmd-crypto and lib/libkmf Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: David Höppner <0xffea@gmail.com> Reviewed by: Josef "Jeff" Sipek <jeffpc@josefsipek.net> Approved by: Dan McDonald <danmcd@omniti.com>
2013-08-163915 Add adjuncts support to the buildKeith M Wesolowski1-1/+1
Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Dan McDonald <danmcd@nexenta.com>
2012-09-222933 compiler warning gags need better granularityRichard Lowe1-0/+2
Reviewed by: Eric Schrock <eric.schrock@delphix.com> Approved by: Garrett D'Amore <garrett@damore.org>
2012-02-182077 lots of unreachable breaks in illumos gateMilan Jurik6-12/+6
Reviewed by: Dan McDonald <danmcd@nexenta.com> Reviewed by: Garrett D'Amore <garrett@damore.org> Approved by: Richard Lowe <richlowe@richlowe.net>
2010-06-086954451 pktool list does not pass user creds to KMF correctlyWyllys Ingersoll1-4/+3
2010-04-236944179 kmf_sign_cert needs more info about signing algorithmWyllys Ingersoll7-68/+64
6944121 KMF should add Basic-Constraint when keyCertSign EKU is set 6943253 pktool should ask to overwrite a CSR file if it already exists 6943234 pktool online help wrongly suggests we can delete a key based on its subject-DN 6940180 certClass should be called privClass (or just class) in KMFPK11_FindPrikeyByCert() 6940146 kmf_sign_data() returns KMF_ERR_INTERNAL but the PKCS#11 plugin returns KMF_ERR_MISSING_ERRCODE 6938522 kmf_openssl.so.1 clobbers OpenSSL locking callbacks
2010-03-22PSARC 2010/032 EC and SHA2 for KMFWyllys Ingersoll9-373/+937
6902640 pktool/KMF needs to support ECDSA keys and certificates 6787016 pktool can offer the ability to generate RSA keypairs
2009-10-206889197 libkmf uses realloc incorrectlyWyllys Ingersoll1-0/+5
6889730 pktool fails to add EKUs to CSR and Cert requests 6889224 pktool incorrectly generates SAN
2009-10-086887337 pktool gencert should use SHA1 instead of MD5Wyllys Ingersoll3-7/+7
2009-09-026796585 Array overrun in libkmfWyllys Ingersoll1-2/+8
6874082 KMF fails to create generic AES keys for NSS 6869630 pktool export is broken after CR 6860037 was integrated
2009-08-016860037 pktool can't find certificate when there is only one on the tokenWyllys Ingersoll4-30/+63
6794511 Improved pktool Error Reporting 6744775 pktool error message for non-existant file could be better
2009-07-246847622 Segmentation faults when running pktool in snv_116Huie-Ying Lee1-3/+2
2009-03-236814522 pktool gencert/gencsr should remove keypair if there is an errorHuie-Ying Lee2-10/+83
2009-03-20PSARC 2008/725 TPM SupportWyllys Ingersoll5-18/+175
6771298 Solaris needs a PKCS11 provider for the TPM 6771289 Solaris needs TCG support
2008-11-176756692 ugly prompt for pkcs11 token pin when using pktoolWyllys Ingersoll2-8/+19
6763087 pktool signcsr dumps core in some conditions due to uninitialized variables. 6744183 pktool doesn't accept "KPClientAuth", "KPKdc" or "scLogon" as valid ekus
2008-07-166721979 pktool fails to delete other objects if keys are not found firstwyllys2-75/+124
6721984 pktool must store keys before storing certs when importing into NSS
2008-06-166710916 pktool needs to report error when "dir" option is present but not ↵wyllys8-9/+34
necessary
2008-05-20PSARC 2008/306 pktool CLI update (dir option correction)wyllys10-132/+95
6670712 cert of dsa type with key pair can not signcsr of rsa type, viceversa. 6670714 pktool gencert keystore=nss and keytype=dsa FAIL, parameter error 6670715 pktool gencsr keystore=nss and token="install" (something not "internal") core dumped 6670725 pktool signcsr command fails to update the keyusage values. 6699535 pktool operations should not have "dir" option for file-based keystore 6700175 fix for 6654080 is not complete
2008-04-036669251 KMF needs to support empty PINswyllys7-46/+113
6669357 KMF pkcs11 incorrectly sets some attributes when creating certificates and keys 6679525 [CLI] Subcommands in pktool's help are overtranslated 6680520 pktool needs to prompt for PIN more often
2008-02-20PSARC 2008/037 new EKU support for pktool and kmfcfgwyllys8-420/+1518
6648052 pktool(1) could allow certificate signing and verification 6652751 kmf_get_kmf_error_str() doesn't know about KMF_ERR_ATTR_NOT_FOUND 6654080 kmf_verify_data() should use algorithm from the cert if KMF_ALGORITHM_INDEX_ATTR is missing 6654205 kmf_find_prikey_by_cert() should be public 6654910 kmf_validate_cert() won't get over non-existent x509v3 extensions in TA 6660235 Command summary on pktool help should be localizable. 6660622 KMF needs API to determine format of raw data
2007-12-216643206 pktool should check for all keys when exporting objtype=keywyllys1-0/+16
2007-12-076634339 kmf_find_key returns error when searching for raw (RSA) public keywyllys1-2/+24
2007-12-06PSARC 2007/604 KMF Pluggability Enhancementshylee1-1/+1
6621224 KMF Dynamic Plugin Support 6621231 pktool list keystore=file dir=/tmp/test prints out incorrect output
2007-11-286620497 KMF does not build proper PKCS12 PDUswyllys1-29/+84
6624214 kmf_get_cert_extn can leak memory 6629477 libkmf is crashed in OpenSSL_StoreKey if keytype is not KMF_RSA or KMF_DSA
2007-10-106612107 pktool list objtype=cert Serial: odditywyllys7-81/+167
6612173 pktool interactive mode should ask more questions 6612636 pktool delete is inconsistent 6613494 pktool fails creation outkey = in dir= if there is a file/dir in current dir of same name
2007-09-256607135 KMF incorrectly labels public keys as privatewyllys1-0/+1
2007-09-176546405 KMF Interfaces need to be extensible (fix lint)wyllys2-5/+5
2007-09-14PSARC 2007/426 KMFAPI Interface Taxonomy Changewyllys11-1176/+3089
PSARC 2007/465 pktool symmetric key enhancements 6546405 KMF Interfaces need to be extensible 6547894 pktool should be more detailed 6590232 pktool should import and export generic keys
2007-08-086585894 pktool import usage shows bogus nickname parameterhylee1-10/+9
6585913 pktool import keystore=nss does not work for PEM encoded certs
2007-04-106541084 pktool list objtype=key displays incorrect informationhylee2-29/+6
6542216 pktool and mac/decrypt didn't use same 'enter pin' string.
2007-03-13PSARC 2007/094 encrypt(1) / mac(1) token key supporthylee3-11/+13
4868006 encrypt(1) and mac(1) needs to support token objects 6517162 pktool genkey needs to support generic secret key
2007-01-266507361 pktool help doesn'twyllys2-11/+32
6514823 kmfcfg is misspelled in exec_attr 6515109 Error message when using "pktool gencert" should use 'serial' instead of 'serno'
2007-01-116501154 kssladm could use KMFwyllys2-2/+6
--HG-- rename : usr/src/cmd/cmd-inet/usr.sbin/kssl/kssladm/openssl_util.c => usr/src/cmd/cmd-inet/usr.sbin/kssl/kssladm/ksslutil.c
2006-11-106224192 Solaris needs unified key management interfaces (Fix _msg build target)wyllys1-1/+1
6224192 Solaris needs unified key management interfaces (suppress NSS lint error)
2006-11-10PSARC 2005/074 Solaris Key Management Frameworkwyllys21-5172/+5382
6224192 Solaris needs unified key management interfaces --HG-- rename : usr/src/cmd/cmd-crypto/pktool/biginteger.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/biginteger.h rename : usr/src/cmd/cmd-crypto/pktool/derparse.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/derparse.c rename : usr/src/cmd/cmd-crypto/pktool/derparse.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/derparse.h rename : usr/src/cmd/cmd-crypto/pktool/osslcommon.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/osslcommon.c rename : usr/src/cmd/cmd-crypto/pktool/osslcommon.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/osslcommon.h rename : usr/src/cmd/cmd-crypto/pktool/p12common.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/p12common.c rename : usr/src/cmd/cmd-crypto/pktool/p12common.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/p12common.h
2006-06-07PSARC/2006/019 OpenSSL upgrade to 0.9.8ajp1619481-4/+6
6352999 upgrade OpenSSL to 0.9.8a --HG-- rename : usr/src/common/openssl/crypto/asn1/f.c => deleted_files/usr/src/common/openssl/crypto/asn1/f.c rename : usr/src/common/openssl/crypto/asn1/x_cinf.c => deleted_files/usr/src/common/openssl/crypto/asn1/x_cinf.c rename : usr/src/common/openssl/crypto/ec/ecp_recp.c => deleted_files/usr/src/common/openssl/crypto/ec/ecp_recp.c rename : usr/src/common/openssl/crypto/engine/hw.ec => deleted_files/usr/src/common/openssl/crypto/engine/hw.ec rename : usr/src/common/openssl/crypto/engine/hw_4758_cca.c => deleted_files/usr/src/common/openssl/crypto/engine/hw_4758_cca.c rename : usr/src/common/openssl/crypto/engine/hw_4758_cca_err.c => deleted_files/usr/src/common/openssl/crypto/engine/hw_4758_cca_err.c rename : usr/src/common/openssl/crypto/engine/hw_4758_cca_err.h => deleted_files/usr/src/common/openssl/crypto/engine/hw_4758_cca_err.h rename : usr/src/common/openssl/crypto/engine/hw_aep.c => deleted_files/usr/src/common/openssl/crypto/engine/hw_aep.c rename : usr/src/common/openssl/crypto/engine/hw_aep_err.c => deleted_files/usr/src/common/openssl/crypto/engine/hw_aep_err.c rename : usr/src/common/openssl/crypto/engine/hw_aep_err.h => deleted_files/usr/src/common/openssl/crypto/engine/hw_aep_err.h rename : usr/src/common/openssl/crypto/engine/hw_atalla.c => deleted_files/usr/src/common/openssl/crypto/engine/hw_atalla.c rename : usr/src/common/openssl/crypto/engine/hw_atalla_err.c => deleted_files/usr/src/common/openssl/crypto/engine/hw_atalla_err.c rename : usr/src/common/openssl/crypto/engine/hw_atalla_err.h => deleted_files/usr/src/common/openssl/crypto/engine/hw_atalla_err.h rename : usr/src/common/openssl/crypto/engine/hw_cryptodev.c => deleted_files/usr/src/common/openssl/crypto/engine/hw_cryptodev.c rename : usr/src/common/openssl/crypto/engine/hw_cswift.c => deleted_files/usr/src/common/openssl/crypto/engine/hw_cswift.c rename : usr/src/common/openssl/crypto/engine/hw_cswift_err.c => deleted_files/usr/src/common/openssl/crypto/engine/hw_cswift_err.c rename : usr/src/common/openssl/crypto/engine/hw_cswift_err.h => deleted_files/usr/src/common/openssl/crypto/engine/hw_cswift_err.h rename : usr/src/common/openssl/crypto/engine/hw_ncipher.c => deleted_files/usr/src/common/openssl/crypto/engine/hw_ncipher.c rename : usr/src/common/openssl/crypto/engine/hw_ncipher_err.c => deleted_files/usr/src/common/openssl/crypto/engine/hw_ncipher_err.c rename : usr/src/common/openssl/crypto/engine/hw_ncipher_err.h => deleted_files/usr/src/common/openssl/crypto/engine/hw_ncipher_err.h rename : usr/src/common/openssl/crypto/engine/hw_nuron.c => deleted_files/usr/src/common/openssl/crypto/engine/hw_nuron.c rename : usr/src/common/openssl/crypto/engine/hw_nuron_err.c => deleted_files/usr/src/common/openssl/crypto/engine/hw_nuron_err.c rename : usr/src/common/openssl/crypto/engine/hw_nuron_err.h => deleted_files/usr/src/common/openssl/crypto/engine/hw_nuron_err.h rename : usr/src/common/openssl/crypto/engine/hw_sureware.c => deleted_files/usr/src/common/openssl/crypto/engine/hw_sureware.c rename : usr/src/common/openssl/crypto/engine/hw_sureware_err.c => deleted_files/usr/src/common/openssl/crypto/engine/hw_sureware_err.c rename : usr/src/common/openssl/crypto/engine/hw_sureware_err.h => deleted_files/usr/src/common/openssl/crypto/engine/hw_sureware_err.h rename : usr/src/common/openssl/crypto/engine/hw_ubsec.c => deleted_files/usr/src/common/openssl/crypto/engine/hw_ubsec.c rename : usr/src/common/openssl/crypto/engine/hw_ubsec_err.c => deleted_files/usr/src/common/openssl/crypto/engine/hw_ubsec_err.c rename : usr/src/common/openssl/crypto/engine/hw_ubsec_err.h => deleted_files/usr/src/common/openssl/crypto/engine/hw_ubsec_err.h rename : usr/src/common/openssl/crypto/engine/vendor_defns/aep.h => deleted_files/usr/src/common/openssl/crypto/engine/vendor_defns/aep.h rename : usr/src/common/openssl/crypto/engine/vendor_defns/atalla.h => deleted_files/usr/src/common/openssl/crypto/engine/vendor_defns/atalla.h rename : usr/src/common/openssl/crypto/engine/vendor_defns/cswift.h => deleted_files/usr/src/common/openssl/crypto/engine/vendor_defns/cswift.h rename : usr/src/common/openssl/crypto/engine/vendor_defns/hw_4758_cca.h => deleted_files/usr/src/common/openssl/crypto/engine/vendor_defns/hw_4758_cca.h rename : usr/src/common/openssl/crypto/engine/vendor_defns/hw_ubsec.h => deleted_files/usr/src/common/openssl/crypto/engine/vendor_defns/hw_ubsec.h rename : usr/src/common/openssl/crypto/engine/vendor_defns/hwcryptohook.h => deleted_files/usr/src/common/openssl/crypto/engine/vendor_defns/hwcryptohook.h rename : usr/src/common/openssl/crypto/engine/vendor_defns/sureware.h => deleted_files/usr/src/common/openssl/crypto/engine/vendor_defns/sureware.h
2006-04-196381913 serial number on export is encoded instead of raw bytesdinak1-8/+11
2005-11-07PSARC/2005/290 pktool(1) alternate token supportdinak8-91/+490
PSARC/2005/634 pktool CLI update 6288840 pktool(1) alternate token support 6332420 change pktool CLI to use attr=value format
2005-06-15PSARC 2004/124 pktool enhancements to support object migration and softtoken ↵dinak17-312/+5781
interoperability PSARC 2005/019 pktool(1) list/delete updates 4931202 Provide import utility from PKCS12 file to softtoken's keystore 5059459 provide utility to export-to-PKCS#12-file from softttoken 5059461 pktool(1) needs subcommands to list and delete objects in softtoken 6216772 update pktool(1) list/delete subcommands 6278459 add "tokens" subcommand to pktool(1) 6285539 E_NAME_USED_NOT_DEF2 lint error for ENGINE_load_builtin_engines
2005-06-14OpenSolaris Launchstevel@tonic-gate5-0/+834