summaryrefslogtreecommitdiff
path: root/usr/src/lib/libkmf
AgeCommit message (Collapse)AuthorFilesLines
2016-03-04 [illumos-gate merge]Jerry Jelinek1-2/+0
commit 38379e9254628617dd4995589f23b06c84ffe16e 6715 Remove MD2 from libkmf
2016-03-036715 Remove MD2 from libkmfDan McDonald1-2/+0
Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Igor Kozhukhov <ikozhukhov@gmail.com> Reviewed by: Saso Kiselkov <skiselkov.ml@gmail.com> Approved by: Garrett D'Amore <garrett@damore.org>
2015-05-06 [illumos-gate merge]Jerry Jelinek2-1/+6
commit 7e89328164e4b89906924cf4e0387ea13a77631b 5753 libnsl: set_up_connection() over TCP does not adhere the specified timeout commit 12844f5a6e6a4f8cb472dc421b8263103c55bd43 5651 Missing header file sys/fs/s5ino.h referenced in /usr/src/cmd/acct/diskusg.c commit 4d0eb50e691de4c20b1dd9976ad6839fede8a42d 4719 update gate build environment to [open]jdk7 4742 update manifests for javadoc7 4743 Fix deprecated /usr/j2se usage in slp and remove from filesystem(5) manpage 4744 remove traces of /var/sadm/system/admin/default_java commit 37bbd7cc85ebfd31fbf68569b8b098e5448c9ce9 5878 Additional lint fixes for sunstudio12.1 and more modern OpenSSL Conflicts: usr/src/cmd/dtrace/test/tst/common/java_api/Makefile usr/src/cmd/dtrace/test/cmd/jdtrace/Makefile
2015-05-055878 Additional lint fixes for sunstudio12.1 and more modern OpenSSLRichard Lowe2-1/+6
Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org> Approved by: Gordon Ross <gordon.w.ross@gmail.com>
2015-02-17 [illumos-gate merge]Jerry Jelinek8-44/+44
commit 6b35cb3cf158584a9408d44b9b6796564e8e1882 5591 initialisation inversion of component order in cmd-crypto/elfsign.c 5620 cstyle updates for cmd/cmd-crypto and lib/libkmf
2015-02-165591 initialisation inversion of component order in cmd-crypto/elfsign.cRichard PALO8-44/+44
5620 cstyle updates for cmd/cmd-crypto and lib/libkmf Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: David Höppner <0xffea@gmail.com> Reviewed by: Josef "Jeff" Sipek <jeffpc@josefsipek.net> Approved by: Dan McDonald <danmcd@omniti.com>
2014-05-22 [illumos-gate merge]Keith M Wesolowski2-5/+19
commit d00075c72fe6e0468054c64c53d70554c1d1cb02 4867 Uninitialized variables in libnsl commit d7141854234c22ab8fe0547bf51a2f3a30781870 Conflicts: usr/src/lib/pkcs11/pkcs11_tpm/Makefile.com usr/src/lib/libwanboot/Makefile.com usr/src/lib/libpkg/Makefile.com usr/src/cmd/ssh/sshd/Makefile usr/src/cmd/ssh/ssh/Makefile usr/src/cmd/ssh/ssh-keysign/Makefile usr/src/cmd/ssh/ssh-keyscan/Makefile usr/src/cmd/ssh/ssh-keygen/Makefile usr/src/cmd/ssh/ssh-agent/Makefile usr/src/cmd/ssh/ssh-add/Makefile usr/src/cmd/ssh/sftp/Makefile usr/src/cmd/ssh/sftp-server/Makefile usr/src/cmd/cmd-inet/usr.lib/wanboot/wanboot-cgi/Makefile usr/src/cmd/cmd-inet/usr.lib/wanboot/p12split/Makefile
2014-05-20backout 4853: breaks lintRobert Mustacchi2-5/+19
2014-05-20 [illumos-gate merge]Keith M Wesolowski2-19/+5
commit 826ac02a0def83e0a41b29321470d299c7389aab 4857 xargs(1) -n and -I combine to do potentially the wrong thing commit be082110c08433beadb738ad3be035a73d995ea8 4730 metaslab group taskq should be destroyed in metaslab_group_destroy() commit a65cd518c5d0f30c53594a7022eb0f7d04c98cef 4853 illumos-gate is not lint-clean when built with openssl 1.0 Conflicts: usr/src/test/util-tests/tests/Makefile usr/src/lib/pkcs11/pkcs11_tpm/Makefile.com usr/src/lib/libwanboot/Makefile.com usr/src/lib/libpkg/Makefile.com usr/src/lib/libkmf/plugins/kmf_openssl/Makefile.com usr/src/cmd/ssh/sshd/Makefile usr/src/cmd/ssh/ssh/Makefile usr/src/cmd/ssh/ssh-keysign/Makefile usr/src/cmd/ssh/ssh-keyscan/Makefile usr/src/cmd/ssh/ssh-keygen/Makefile usr/src/cmd/ssh/ssh-agent/Makefile usr/src/cmd/ssh/ssh-add/Makefile usr/src/cmd/ssh/sftp/Makefile usr/src/cmd/ssh/sftp-server/Makefile usr/src/cmd/ssh/libssh/Makefile.com usr/src/cmd/cmd-inet/usr.lib/wanboot/wanboot-cgi/Makefile usr/src/cmd/cmd-inet/usr.lib/wanboot/p12split/Makefile
2014-05-194853 illumos-gate is not lint-clean when built with openssl 1.0Alexander Pyhalov2-19/+5
Reviewed by: Keith Wesolowski <keith.wesolowski@joyent.com> Reviewed by: Alexander Eremin <alexander.eremin@nexenta.com> Approved by: Robert Mustacchi <rm@joyent.com>
2013-08-163915 Add adjuncts support to the buildKeith M Wesolowski5-9/+15
Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Dan McDonald <danmcd@nexenta.com>
2013-06-07OS-2257 unusable SSL libraries should have different names in the platformKeith M Wesolowski1-4/+4
OS-2285 platform contains a few broken symlinks
2012-11-07Illumos syncJohn Sonnenschein5-0/+17
2012-06-21smartos-live#51 No symlink for libusb.so to libusb.so.1 for -lusbKeith M Wesolowski5-9/+15
smartos-live#91 make world fails on trying to include zlib.h OS-1303 smartos-live src_addon can die OS-1306 non-bootstrappable runtime dependencies should be isolated OS-1308 illumos-joyent should support using pkgsrc libraries for native ... OS-1314 kvm.so is wrongly built as if it were a kmod OS-1317 GZ crle configuration pollution OS-1320 64-bit C++ objects in illumos are still getting gcc DT_RPATH
2012-09-222933 compiler warning gags need better granularityRichard Lowe5-0/+17
Reviewed by: Eric Schrock <eric.schrock@delphix.com> Approved by: Garrett D'Amore <garrett@damore.org>
2012-04-241665 Illumos wont build against openssl 1.0.0Theo Schlossnagle1-0/+18
Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Keith Wesolowski <keith.wesolowski@joyent.com> Reviewed by: Joshua M. Clulow <josh@sysmgr.org> Approved by: Albert Lee <trisk@nexenta.com>
2010-07-27PSARC 2010/269 KMF Certificate Validation EnhancementsWyllys Ingersoll4-67/+102
6963018 kmf_validate_cert should put more flags into the output attribute in case of an error 6939226 allow one KMF session to choose from multiple trusted anchors to validate a certificate
2010-06-306964517 OSnet mapfiles should use version 2 link-editor syntax (2nd pass)Ali Bahrami1-1/+3
6948720 SHT_INIT_ARRAY etc. section names don't follow ELF gABI 6962343 sgsmsg should use mkstemp() for temporary file creation
2010-06-246916796 OSnet mapfiles should use version 2 link-editor syntaxAli Bahrami5-14/+20
--HG-- rename : usr/src/cmd/sgs/libelf/common/mapfile-common => usr/src/cmd/sgs/libelf/common/mapfile-vers rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-bindings => usr/src/cmd/sgs/link_audit/common/mapfile-vers-bindings rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-perfcnt => usr/src/cmd/sgs/link_audit/common/mapfile-vers-perfcnt rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-symbindrep => usr/src/cmd/sgs/link_audit/common/mapfile-vers-symbindrep rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-truss => usr/src/cmd/sgs/link_audit/common/mapfile-vers-truss rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-who => usr/src/cmd/sgs/link_audit/common/mapfile-vers-who rename : usr/src/common/mapfiles/i386/map.noexdata => usr/src/common/mapfiles/common/map.noexdata rename : usr/src/lib/libaio/sparc/mapfile-vers => usr/src/lib/libaio/common/mapfile-vers rename : usr/src/lib/libelfsign/common/mapfile.map => usr/src/lib/libelfsign/common/mapfile-vers rename : usr/src/lib/libpthread/sparc/mapfile-vers => usr/src/lib/libpthread/common/mapfile-vers rename : usr/src/lib/librt/amd64/mapfile-vers => usr/src/lib/librt/common/mapfile-vers rename : usr/src/lib/libsys/sparc/mapfile-vers => usr/src/lib/libsys/common/mapfile-vers rename : usr/src/lib/libthread/sparc/mapfile-vers => usr/src/lib/libthread/common/mapfile-vers
2010-06-216961704 KMF generates certificates with bad signaturesWyllys Ingersoll1-1/+17
2010-06-11PSARC/2010/177 KMF Certificate Name mapping extensionsJan Pechanec20-43/+1196
PSARC/2010/178 KMF Common Name Mapper 6942888 KMF should provide certificate to name mapping capabilities 6949176 KMF cert-to-name mapping framework needs a CN mapper
2010-04-236944179 kmf_sign_cert needs more info about signing algorithmWyllys Ingersoll4-98/+187
6944121 KMF should add Basic-Constraint when keyCertSign EKU is set 6943253 pktool should ask to overwrite a CSR file if it already exists 6943234 pktool online help wrongly suggests we can delete a key based on its subject-DN 6940180 certClass should be called privClass (or just class) in KMFPK11_FindPrikeyByCert() 6940146 kmf_sign_data() returns KMF_ERR_INTERNAL but the PKCS#11 plugin returns KMF_ERR_MISSING_ERRCODE 6938522 kmf_openssl.so.1 clobbers OpenSSL locking callbacks
2010-03-22PSARC 2010/032 EC and SHA2 for KMFWyllys Ingersoll18-1186/+1734
6902640 pktool/KMF needs to support ECDSA keys and certificates 6787016 pktool can offer the ability to generate RSA keypairs
2010-02-176864896 libkmf leaks memoryDan OpenSolaris Anderson1-30/+54
2010-01-086914632 libkmf has unused functions that should be removedWyllys Ingersoll8-777/+29
6914613 libelfsign still uses deprecated libkmf API
2009-12-306894056 libc is not cleanSurya Prakki2-21/+24
6894060 libnsl is not lint clean 6894068 libpool is not lint clean 6894073 some zone libs are not lint clean 6913623 some user land components of ON are not ss12u1 lint clean
2009-12-016904179 kcfd dies under the tender mercies of libumemWyllys Ingersoll1-7/+3
2009-10-206889197 libkmf uses realloc incorrectlyWyllys Ingersoll5-32/+143
6889730 pktool fails to add EKUs to CSR and Cert requests 6889224 pktool incorrectly generates SAN
2009-10-086887337 pktool gencert should use SHA1 instead of MD5Wyllys Ingersoll1-5/+2
2009-09-026796585 Array overrun in libkmfWyllys Ingersoll2-8/+5
6874082 KMF fails to create generic AES keys for NSS 6869630 pktool export is broken after CR 6860037 was integrated
2009-07-176852240 libelfsign should use pkcs11_softtoken instead of OpenSSL for ↵Valerie Bubb Fenwick2-22/+22
FIPS-140 integrity checking 6851814 tools elfsign is unnecessarily linked against pkcs11_softtoken
2009-07-026855407 kernel crypto module reports firmware version incorrectlyWyllys Ingersoll2-3/+1
6854979 kmf_pkcs11.so.1 has bad SONAME and versioning
2009-05-286806387 Move OpenSSL from ON to SFWMark Phalan1-2/+1
2009-03-20PSARC 2008/725 TPM SupportWyllys Ingersoll5-12/+68
6771298 Solaris needs a PKCS11 provider for the TPM 6771289 Solaris needs TCG support
2009-02-106798660 Cadmium .NOT file processing problem with CWD relative file pathsAli Bahrami5-10/+70
Contributed by Richard Lowe 6785284 Mapfile versioning rules need to be more visible to gatelings 6800164 Standard file exclusion mechanism needed for Cadmium tools
2008-11-216449514 move OpenSSL from /usr/sfw to /usr, /libJohn.Zolnowsky@Sun.COM6-32/+20
6457487 clean up Makefile for cmd/openssl 6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674 6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674 6700122 cryptosvc should be able to start before filesystem/usr
2008-11-176756692 ugly prompt for pkcs11 token pin when using pktoolWyllys Ingersoll1-3/+4
6763087 pktool signcsr dumps core in some conditions due to uninitialized variables. 6744183 pktool doesn't accept "KPClientAuth", "KPKdc" or "scLogon" as valid ekus
2008-08-296737647 token name matching logic in KMF is brokenWyllys Ingersoll1-5/+2
2008-08-04backout 6449514/6686002/6686004/6700122: needs more worksuha6-15/+14
2008-08-016449514 move OpenSSL from /usr/sfw to /usr, /libjohnz6-14/+15
6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674 6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674 6700122 cryptosvc should be able to start before filesystem/usr
2008-05-20PSARC 2008/306 pktool CLI update (dir option correction)wyllys5-11/+62
6670712 cert of dsa type with key pair can not signcsr of rsa type, viceversa. 6670714 pktool gencert keystore=nss and keytype=dsa FAIL, parameter error 6670715 pktool gencsr keystore=nss and token="install" (something not "internal") core dumped 6670725 pktool signcsr command fails to update the keyusage values. 6699535 pktool operations should not have "dir" option for file-based keystore 6700175 fix for 6654080 is not complete
2008-05-066494306 need single source for bignum codefr412791-2/+2
--HG-- rename : usr/src/uts/sun4u/rsa/Makefile => deleted_files/usr/src/uts/sun4u/rsa/Makefile rename : usr/src/uts/sun4u/rsa/mont_mulf.s => usr/src/common/bignum/sun4u/mont_mulf_kernel_v9.s rename : usr/src/uts/intel/rsa/Makefile.32 => usr/src/uts/intel/bignum/Makefile.32 rename : usr/src/uts/intel/rsa/Makefile.64 => usr/src/uts/intel/bignum/Makefile.64
2008-05-026683064 check_rtime could do with some spring cleaningrie2-13/+7
2008-04-036669251 KMF needs to support empty PINswyllys1-49/+93
6669357 KMF pkcs11 incorrectly sets some attributes when creating certificates and keys 6679525 [CLI] Subcommands in pktool's help are overtranslated 6680520 pktool needs to prompt for PIN more often
2008-02-20PSARC 2008/037 new EKU support for pktool and kmfcfgwyllys16-371/+757
6648052 pktool(1) could allow certificate signing and verification 6652751 kmf_get_kmf_error_str() doesn't know about KMF_ERR_ATTR_NOT_FOUND 6654080 kmf_verify_data() should use algorithm from the cert if KMF_ALGORITHM_INDEX_ATTR is missing 6654205 kmf_find_prikey_by_cert() should be public 6654910 kmf_validate_cert() won't get over non-existent x509v3 extensions in TA 6660235 Command summary on pktool help should be localizable. 6660622 KMF needs API to determine format of raw data
2008-01-116643119 kmf_validate_cert() should download CRL only when the previous one ↵wyllys1-1/+1
has expired (fix lint)
2008-01-116630137 Un-initialized variable caused a wrong branch in KMFPK11_StoreKeywyllys2-51/+84
6643119 kmf_validate_cert() should download CRL only when the previous one has expired
2007-12-076634339 kmf_find_key returns error when searching for raw (RSA) public keywyllys3-45/+91
2007-12-06PSARC 2007/604 KMF Pluggability Enhancementshylee7-24/+454
6621224 KMF Dynamic Plugin Support 6621231 pktool list keystore=file dir=/tmp/test prints out incorrect output
2007-11-286620497 KMF does not build proper PKCS12 PDUswyllys7-311/+821
6624214 kmf_get_cert_extn can leak memory 6629477 libkmf is crashed in OpenSSL_StoreKey if keytype is not KMF_RSA or KMF_DSA
generated by cgit v1.2.3 (git 2.39.1) at 2025-07-26 12:04:05 +0000