summaryrefslogtreecommitdiff
path: root/usr/src/lib/libkmf
AgeCommit message (Collapse)AuthorFilesLines
2021-08-1313930 Build fails with modern NSSAndrew Stormont1-4/+5
Reviewed by: Andy Fiddaman <andy@omnios.org> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Robert Mustacchi <rm@fingolfin.org>
2021-08-0413985 Support building with OpenSSL 3.0Andy Fiddaman1-0/+14
Reviewed by: Andrew Stormont <andyjstormont@gmail.com> Reviewed by: Robert Mustacchi <rm@fingolfin.org> Reviewed by: Jason King <jason.brian.king@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2021-04-0913487 want mapfile-based assertions about symbol propertiesRichard Lowe1-196/+1176
Reviewed by: Robert Mustacchi <rm@fingolfin.org> Reviewed by: Jason King <jason.brian.king@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2020-05-0412454 remove lint library machineryRichard Lowe13-46/+15
Reviewed by: Andy Fiddaman <andy@omniosce.org> Reviewed by: Gordon Ross <gwr@nexenta.com> Approved by: Dan McDonald <danmcd@joyent.com>
2020-02-0512217 add ld assert-deflib and guidance to gate buildToomas Soome2-19/+5
Reviewed by: Robert Mustacchi <rm@fingolfin.org> Reviewed by: Gergő Mihály Doma <domag02@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2019-09-0211644 kmf_openssl: NULL pointer issuesAndy Fiddaman1-165/+93
Reviewed by: Toomas Soome <tsoome@me.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Reviewed by: Peter Tribble <peter.tribble@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2019-08-1611528 Makefile.noget can get goneJohn Levon3-3/+3
11529 Use -Wno-maybe-initialized Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Robert Mustacchi <rm@joyent.com>
2019-07-0311164 libkmf: NULL pointer errorsToomas Soome7-17/+17
Reviewed by: C Fraire <cfraire@me.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2019-02-1310361 usr/lib - stop lint library generation and packagingAndy Fiddaman2-63/+0
Reviewed by: Jason King <jason.king@joyent.com> Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Frederik Wessels <wessels147@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2019-01-1410079 smatch Makefile changes for usr/src/libJohn Levon5-8/+21
Reviewed by: Andy Fiddaman <andy@omniosce.org> Approved by: Robert Mustacchi <rm@joyent.com>
2018-12-0510018 libkmf: macro expands to multiple statementsToomas Soome2-2/+4
Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Gergő Mihály Doma <domag02@gmail.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2018-10-035159 ipsec_libssl_setup.c loads libcryptoJason King4-2/+225
Reviewed by: Andy Fiddaman <andy@omniosce.org> Reviewed by: Igor Kozhukhov <igor@dilos.org> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Dan McDonald <danmcd@joyent.com>
2018-06-226429 SMB domain join doesn't work with libreSSLAndrew Stormont3-23/+42
9546 Restore support for building against LibreSSL 9547 Remove KMF dependency on insecure encryption types Reviewed by: Andy Fiddaman <af@citrus-it.net> Reviewed by: Vitaliy Gusev <gusev.vitaliy@icloud.com> Reviewed by: Ken Mays <kmays2000@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2018-05-028982 Support building with OpenSSL 1.1Andy Fiddaman4-313/+909
Reviewed by: Dominik Hassler <hadfl@omniosce.org> Reviewed by: Igor Kozhukhov <igor@dilos.org> Reviewed by: Ken Mays <maybird1776@yahoo.com> Reviewed by: Jason King <jason.king@joyent.com> Approved by: Dan McDonald <danmcd@joyent.com>
2018-02-099070 Remove wanboot from gateAndy Fiddaman1-2/+1
Reviewed by: Yuri Pankov <yuri.pankov@nexenta.com> Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Alexander Pyhalov <apyhalov@gmail.com> Reviewed by: Jorge Schrauwen <sjorge@blackdot.be> Approved by: Hans Rosenfeld <hans.rosenfeld@joyent.com>
2016-03-036715 Remove MD2 from libkmfDan McDonald1-2/+0
Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Igor Kozhukhov <ikozhukhov@gmail.com> Reviewed by: Saso Kiselkov <skiselkov.ml@gmail.com> Approved by: Garrett D'Amore <garrett@damore.org>
2015-05-055878 Additional lint fixes for sunstudio12.1 and more modern OpenSSLRichard Lowe2-1/+6
Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org> Approved by: Gordon Ross <gordon.w.ross@gmail.com>
2015-02-165591 initialisation inversion of component order in cmd-crypto/elfsign.cRichard PALO8-44/+44
5620 cstyle updates for cmd/cmd-crypto and lib/libkmf Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: David Höppner <0xffea@gmail.com> Reviewed by: Josef "Jeff" Sipek <jeffpc@josefsipek.net> Approved by: Dan McDonald <danmcd@omniti.com>
2014-05-20backout 4853: breaks lintRobert Mustacchi2-5/+19
2014-05-194853 illumos-gate is not lint-clean when built with openssl 1.0Alexander Pyhalov2-19/+5
Reviewed by: Keith Wesolowski <keith.wesolowski@joyent.com> Reviewed by: Alexander Eremin <alexander.eremin@nexenta.com> Approved by: Robert Mustacchi <rm@joyent.com>
2013-08-163915 Add adjuncts support to the buildKeith M Wesolowski5-9/+15
Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Dan McDonald <danmcd@nexenta.com>
2012-09-222933 compiler warning gags need better granularityRichard Lowe5-0/+17
Reviewed by: Eric Schrock <eric.schrock@delphix.com> Approved by: Garrett D'Amore <garrett@damore.org>
2012-04-241665 Illumos wont build against openssl 1.0.0Theo Schlossnagle1-0/+18
Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Keith Wesolowski <keith.wesolowski@joyent.com> Reviewed by: Joshua M. Clulow <josh@sysmgr.org> Approved by: Albert Lee <trisk@nexenta.com>
2010-07-27PSARC 2010/269 KMF Certificate Validation EnhancementsWyllys Ingersoll4-67/+102
6963018 kmf_validate_cert should put more flags into the output attribute in case of an error 6939226 allow one KMF session to choose from multiple trusted anchors to validate a certificate
2010-06-306964517 OSnet mapfiles should use version 2 link-editor syntax (2nd pass)Ali Bahrami1-1/+3
6948720 SHT_INIT_ARRAY etc. section names don't follow ELF gABI 6962343 sgsmsg should use mkstemp() for temporary file creation
2010-06-246916796 OSnet mapfiles should use version 2 link-editor syntaxAli Bahrami5-14/+20
--HG-- rename : usr/src/cmd/sgs/libelf/common/mapfile-common => usr/src/cmd/sgs/libelf/common/mapfile-vers rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-bindings => usr/src/cmd/sgs/link_audit/common/mapfile-vers-bindings rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-perfcnt => usr/src/cmd/sgs/link_audit/common/mapfile-vers-perfcnt rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-symbindrep => usr/src/cmd/sgs/link_audit/common/mapfile-vers-symbindrep rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-truss => usr/src/cmd/sgs/link_audit/common/mapfile-vers-truss rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-who => usr/src/cmd/sgs/link_audit/common/mapfile-vers-who rename : usr/src/common/mapfiles/i386/map.noexdata => usr/src/common/mapfiles/common/map.noexdata rename : usr/src/lib/libaio/sparc/mapfile-vers => usr/src/lib/libaio/common/mapfile-vers rename : usr/src/lib/libelfsign/common/mapfile.map => usr/src/lib/libelfsign/common/mapfile-vers rename : usr/src/lib/libpthread/sparc/mapfile-vers => usr/src/lib/libpthread/common/mapfile-vers rename : usr/src/lib/librt/amd64/mapfile-vers => usr/src/lib/librt/common/mapfile-vers rename : usr/src/lib/libsys/sparc/mapfile-vers => usr/src/lib/libsys/common/mapfile-vers rename : usr/src/lib/libthread/sparc/mapfile-vers => usr/src/lib/libthread/common/mapfile-vers
2010-06-216961704 KMF generates certificates with bad signaturesWyllys Ingersoll1-1/+17
2010-06-11PSARC/2010/177 KMF Certificate Name mapping extensionsJan Pechanec20-43/+1196
PSARC/2010/178 KMF Common Name Mapper 6942888 KMF should provide certificate to name mapping capabilities 6949176 KMF cert-to-name mapping framework needs a CN mapper
2010-04-236944179 kmf_sign_cert needs more info about signing algorithmWyllys Ingersoll4-98/+187
6944121 KMF should add Basic-Constraint when keyCertSign EKU is set 6943253 pktool should ask to overwrite a CSR file if it already exists 6943234 pktool online help wrongly suggests we can delete a key based on its subject-DN 6940180 certClass should be called privClass (or just class) in KMFPK11_FindPrikeyByCert() 6940146 kmf_sign_data() returns KMF_ERR_INTERNAL but the PKCS#11 plugin returns KMF_ERR_MISSING_ERRCODE 6938522 kmf_openssl.so.1 clobbers OpenSSL locking callbacks
2010-03-22PSARC 2010/032 EC and SHA2 for KMFWyllys Ingersoll18-1186/+1734
6902640 pktool/KMF needs to support ECDSA keys and certificates 6787016 pktool can offer the ability to generate RSA keypairs
2010-02-176864896 libkmf leaks memoryDan OpenSolaris Anderson1-30/+54
2010-01-086914632 libkmf has unused functions that should be removedWyllys Ingersoll8-777/+29
6914613 libelfsign still uses deprecated libkmf API
2009-12-306894056 libc is not cleanSurya Prakki2-21/+24
6894060 libnsl is not lint clean 6894068 libpool is not lint clean 6894073 some zone libs are not lint clean 6913623 some user land components of ON are not ss12u1 lint clean
2009-12-016904179 kcfd dies under the tender mercies of libumemWyllys Ingersoll1-7/+3
2009-10-206889197 libkmf uses realloc incorrectlyWyllys Ingersoll5-32/+143
6889730 pktool fails to add EKUs to CSR and Cert requests 6889224 pktool incorrectly generates SAN
2009-10-086887337 pktool gencert should use SHA1 instead of MD5Wyllys Ingersoll1-5/+2
2009-09-026796585 Array overrun in libkmfWyllys Ingersoll2-8/+5
6874082 KMF fails to create generic AES keys for NSS 6869630 pktool export is broken after CR 6860037 was integrated
2009-07-176852240 libelfsign should use pkcs11_softtoken instead of OpenSSL for ↵Valerie Bubb Fenwick2-22/+22
FIPS-140 integrity checking 6851814 tools elfsign is unnecessarily linked against pkcs11_softtoken
2009-07-026855407 kernel crypto module reports firmware version incorrectlyWyllys Ingersoll2-3/+1
6854979 kmf_pkcs11.so.1 has bad SONAME and versioning
2009-05-286806387 Move OpenSSL from ON to SFWMark Phalan1-2/+1
2009-03-20PSARC 2008/725 TPM SupportWyllys Ingersoll5-12/+68
6771298 Solaris needs a PKCS11 provider for the TPM 6771289 Solaris needs TCG support
2009-02-106798660 Cadmium .NOT file processing problem with CWD relative file pathsAli Bahrami5-10/+70
Contributed by Richard Lowe 6785284 Mapfile versioning rules need to be more visible to gatelings 6800164 Standard file exclusion mechanism needed for Cadmium tools
2008-11-216449514 move OpenSSL from /usr/sfw to /usr, /libJohn.Zolnowsky@Sun.COM6-32/+20
6457487 clean up Makefile for cmd/openssl 6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674 6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674 6700122 cryptosvc should be able to start before filesystem/usr
2008-11-176756692 ugly prompt for pkcs11 token pin when using pktoolWyllys Ingersoll1-3/+4
6763087 pktool signcsr dumps core in some conditions due to uninitialized variables. 6744183 pktool doesn't accept "KPClientAuth", "KPKdc" or "scLogon" as valid ekus
2008-08-296737647 token name matching logic in KMF is brokenWyllys Ingersoll1-5/+2
2008-08-04backout 6449514/6686002/6686004/6700122: needs more worksuha6-15/+14
2008-08-016449514 move OpenSSL from /usr/sfw to /usr, /libjohnz6-14/+15
6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674 6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674 6700122 cryptosvc should be able to start before filesystem/usr
2008-05-20PSARC 2008/306 pktool CLI update (dir option correction)wyllys5-11/+62
6670712 cert of dsa type with key pair can not signcsr of rsa type, viceversa. 6670714 pktool gencert keystore=nss and keytype=dsa FAIL, parameter error 6670715 pktool gencsr keystore=nss and token="install" (something not "internal") core dumped 6670725 pktool signcsr command fails to update the keyusage values. 6699535 pktool operations should not have "dir" option for file-based keystore 6700175 fix for 6654080 is not complete
2008-05-066494306 need single source for bignum codefr412791-2/+2
--HG-- rename : usr/src/uts/sun4u/rsa/Makefile => deleted_files/usr/src/uts/sun4u/rsa/Makefile rename : usr/src/uts/sun4u/rsa/mont_mulf.s => usr/src/common/bignum/sun4u/mont_mulf_kernel_v9.s rename : usr/src/uts/intel/rsa/Makefile.32 => usr/src/uts/intel/bignum/Makefile.32 rename : usr/src/uts/intel/rsa/Makefile.64 => usr/src/uts/intel/bignum/Makefile.64
2008-05-026683064 check_rtime could do with some spring cleaningrie2-13/+7
generated by cgit v1.2.3 (git 2.39.1) at 2025-07-25 13:28:41 +0000