summaryrefslogtreecommitdiff
path: root/usr/src/cmd/cmd-crypto
AgeCommit message (Collapse)AuthorFilesLines
2009-08-17backout 6855414: breaks buildjmcp2-6/+13
2009-08-176855414 Deliver SPARC support for TPMWyllys Ingersoll2-13/+6
6865428 pkcs11_tpm should be installed by default, or it won't be used
2009-08-016860037 pktool can't find certificate when there is only one on the tokenWyllys Ingersoll4-30/+63
6794511 Improved pktool Error Reporting 6744775 pktool error message for non-existant file could be better
2009-07-296864230 hiho, hiho, it'ch chtime for CH to gojmcp2-19/+2
Portions contributed by Rich Lowe
2009-07-246847622 Segmentation faults when running pktool in snv_116Huie-Ying Lee1-3/+2
2009-07-016846615 Enlarge data buffer in encrypt/decrypt to boost T2 HW accelerator ↵Krishna Yenduri1-4/+8
performance
2009-05-186823839 encrypt utility can cause loss of dataValerie Bubb Fenwick1-2/+5
2009-03-236814522 pktool gencert/gencsr should remove keypair if there is an errorHuie-Ying Lee2-10/+83
2009-03-206666204 meta slot opens and closes /dev/urandom needlessly for every readDina K Nimeh1-3/+3
6722460 finish moving /dev/random and /dev/urandom seeding and usage to libcryptoutil
2009-03-20PSARC 2008/725 TPM SupportWyllys Ingersoll10-25/+1232
6771298 Solaris needs a PKCS11 provider for the TPM 6771289 Solaris needs TCG support
2009-01-096790251 cryptosvc shouldn't depend on filesystem/root:defaultJohn.Zolnowsky@Sun.COM1-2/+2
2008-12-186698202 encrypt(1)/mac(1) should prompt twice for the passphraseDina K Nimeh1-3/+4
2008-12-086773289 libcryptoutil needs to interact with calling functions betterAnthony Scarpino2-6/+2
2008-12-046778683 Duplicate entries created in kcf.conf after disabling/enabling ↵Dan OpenSolaris Anderson1-11/+14
provider mechanisms by cryptoadm
2008-11-216449514 move OpenSSL from /usr/sfw to /usr, /libJohn.Zolnowsky@Sun.COM3-15/+11
6457487 clean up Makefile for cmd/openssl 6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674 6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674 6700122 cryptosvc should be able to start before filesystem/usr
2008-11-176756692 ugly prompt for pkcs11 token pin when using pktoolWyllys Ingersoll2-8/+19
6763087 pktool signcsr dumps core in some conditions due to uninitialized variables. 6744183 pktool doesn't accept "KPClientAuth", "KPKdc" or "scLogon" as valid ekus
2008-10-296414175 kcf.conf's supportedlist not providing much usefulnessDaniel OpenSolaris Anderson6-992/+1015
2008-08-146621176 $SRC/cmd/cmd-crypto/cryptoadm/*.c seem to have syntax errors in the ↵Daniel Anderson5-48/+42
translation notes
2008-08-116195393 funny display of the PIN length for PIN-less PKCS#11 tokensDarren Moffat2-6/+4
2008-08-04backout 6449514/6686002/6686004/6700122: needs more worksuha3-12/+11
2008-08-016449514 move OpenSSL from /usr/sfw to /usr, /libjohnz3-11/+12
6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674 6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674 6700122 cryptosvc should be able to start before filesystem/usr
2008-07-166721979 pktool fails to delete other objects if keys are not found firstwyllys2-75/+124
6721984 pktool must store keys before storing certs when importing into NSS
2008-07-156723237 libcryptoutil should allow mechanism number "0x80000000" (the value ↵da730242-3/+3
of marker CKM_VENDOR_DEFINED)
2008-07-024947627 improve libcrypto string/mechanism conversion functions in edge casesda730242-90/+106
5031131 perf: pkcs11_kernel can benefit from a more efficient pkcs11_mech2str()
2008-06-256715059 elfsign displays a char* as a numberbubbva1-2/+2
2008-06-166710916 pktool needs to report error when "dir" option is present but not ↵wyllys8-9/+34
necessary
2008-05-20PSARC 2008/306 pktool CLI update (dir option correction)wyllys10-132/+95
6670712 cert of dsa type with key pair can not signcsr of rsa type, viceversa. 6670714 pktool gencert keystore=nss and keytype=dsa FAIL, parameter error 6670715 pktool gencsr keystore=nss and token="install" (something not "internal") core dumped 6670725 pktool signcsr command fails to update the keyusage values. 6699535 pktool operations should not have "dir" option for file-based keystore 6700175 fix for 6654080 is not complete
2008-05-026683064 check_rtime could do with some spring cleaningrie1-5/+3
2008-05-016418676 encrypt(1) and decrypt(1) could benefit from being 64-bit programsda730247-52/+256
2008-04-036669251 KMF needs to support empty PINswyllys7-46/+113
6669357 KMF pkcs11 incorrectly sets some attributes when creating certificates and keys 6679525 [CLI] Subcommands in pktool's help are overtranslated 6680520 pktool needs to prompt for PIN more often
2008-03-256652716 Need an ARCFOUR implementation optimized for Intel EM64Tda730247-24/+222
6658907 digest(1) and mac(1) could benefit from being 64-bit programs 6665607 Need a SHA256/SHA384/SHA512 implementation optimized for 64-bit x86 --HG-- rename : usr/src/common/crypto/arcfour/amd64/arcfour_crypt_amd64.s => deleted_files/usr/src/common/crypto/arcfour/amd64/arcfour_crypt_amd64.s
2008-02-20PSARC 2008/037 new EKU support for pktool and kmfcfgwyllys9-422/+1520
6648052 pktool(1) could allow certificate signing and verification 6652751 kmf_get_kmf_error_str() doesn't know about KMF_ERR_ATTR_NOT_FOUND 6654080 kmf_verify_data() should use algorithm from the cert if KMF_ALGORITHM_INDEX_ATTR is missing 6654205 kmf_find_prikey_by_cert() should be public 6654910 kmf_validate_cert() won't get over non-existent x509v3 extensions in TA 6660235 Command summary on pktool help should be localizable. 6660622 KMF needs API to determine format of raw data
2008-02-066649721 elfsign sign/verify with missing certificate can dump corejohnz1-3/+2
2007-12-216643206 pktool should check for all keys when exporting objtype=keywyllys1-0/+16
2007-12-14PSARC 2007/446 Elliptic-Curve Cryptography for Solarismcpowers1-0/+1
5066901 Offer the PKCS#11 Elliptic Curve based mechanisms in Solaris 6562402 kernel software provider for Elliptic Curve mechanisms
2007-12-076634339 kmf_find_key returns error when searching for raw (RSA) public keywyllys1-2/+24
2007-12-06PSARC 2007/604 KMF Pluggability Enhancementshylee14-23/+1196
6621224 KMF Dynamic Plugin Support 6621231 pktool list keystore=file dir=/tmp/test prints out incorrect output
2007-11-286620497 KMF does not build proper PKCS12 PDUswyllys1-29/+84
6624214 kmf_get_cert_extn can leak memory 6629477 libkmf is crashed in OpenSSL_StoreKey if keytype is not KMF_RSA or KMF_DSA
2007-10-126552557 provide helper function that generates pkcs#5 keys from passphrasesdinak2-438/+44
6554395 consolidate duplicated code in decrypt and digest 6607990 SUNW_C_KeyToObject fails to set wrap/unwrap capability on object created from raw key 6607994 SUNW_C_KeyToObject looks like it may destroy an object that was never created 6607998 C_GetSessionInfo never returns CKR_ARGUMENTS_BAD 6608391 consolidate code that reads key data from file
2007-10-106612107 pktool list objtype=cert Serial: odditywyllys7-81/+167
6612173 pktool interactive mode should ask more questions 6612636 pktool delete is inconsistent 6613494 pktool fails creation outkey = in dir= if there is a file/dir in current dir of same name
2007-10-056592898 open elfsign, libelfsignjohnz3-2/+1498
2007-09-256607135 KMF incorrectly labels public keys as privatewyllys1-0/+1
2007-09-176546405 KMF Interfaces need to be extensible (fix lint)wyllys2-5/+5
2007-09-14PSARC 2007/426 KMFAPI Interface Taxonomy Changewyllys20-1393/+3297
PSARC 2007/465 pktool symmetric key enhancements 6546405 KMF Interfaces need to be extensible 6547894 pktool should be more detailed 6590232 pktool should import and export generic keys
2007-08-086585894 pktool import usage shows bogus nickname parameterhylee1-10/+9
6585913 pktool import keystore=nss does not work for PEM encoded certs
2007-04-286549126 elfsign text-format trust roots need to be un-CDDLed, un-SCMedjohnz2-1/+16
--HG-- rename : usr/src/cmd/cmd-crypto/etc/certs/SUNWObjectCA => usr/src/cmd/cmd-crypto/etc/certs/SUNWObjectCA.annot
2007-04-106541084 pktool list objtype=key displays incorrect informationhylee2-29/+6
6542216 pktool and mac/decrypt didn't use same 'enter pin' string.
2007-04-10PSARC/2007/139 Kernel Crypto support for MD4darrenm1-4/+4
6354305 Kernel Crypto support for MD4 6533491 libmd's MD4 produces invalid message digests in 64-bit mode 6539262 MD4/MD5/SHA1/SHA2 Final functions not consistent
2007-03-13PSARC 2007/094 encrypt(1) / mac(1) token key supporthylee7-127/+464
4868006 encrypt(1) and mac(1) needs to support token objects 6517162 pktool genkey needs to support generic secret key
2007-02-166391249 elfsign needs to support Verisign certificate chainjohnz2-3/+68
generated by cgit v1.2.3 (git 2.39.1) at 2025-06-22 06:48:42 +0000