summaryrefslogtreecommitdiff
path: root/usr/src/lib/libkmf
AgeCommit message (Collapse)AuthorFilesLines
2009-12-306894056 libc is not cleanSurya Prakki2-21/+24
6894060 libnsl is not lint clean 6894068 libpool is not lint clean 6894073 some zone libs are not lint clean 6913623 some user land components of ON are not ss12u1 lint clean
2009-12-016904179 kcfd dies under the tender mercies of libumemWyllys Ingersoll1-7/+3
2009-10-206889197 libkmf uses realloc incorrectlyWyllys Ingersoll5-32/+143
6889730 pktool fails to add EKUs to CSR and Cert requests 6889224 pktool incorrectly generates SAN
2009-10-086887337 pktool gencert should use SHA1 instead of MD5Wyllys Ingersoll1-5/+2
2009-09-026796585 Array overrun in libkmfWyllys Ingersoll2-8/+5
6874082 KMF fails to create generic AES keys for NSS 6869630 pktool export is broken after CR 6860037 was integrated
2009-07-176852240 libelfsign should use pkcs11_softtoken instead of OpenSSL for ↵Valerie Bubb Fenwick2-22/+22
FIPS-140 integrity checking 6851814 tools elfsign is unnecessarily linked against pkcs11_softtoken
2009-07-026855407 kernel crypto module reports firmware version incorrectlyWyllys Ingersoll2-3/+1
6854979 kmf_pkcs11.so.1 has bad SONAME and versioning
2009-05-286806387 Move OpenSSL from ON to SFWMark Phalan1-2/+1
2009-03-20PSARC 2008/725 TPM SupportWyllys Ingersoll5-12/+68
6771298 Solaris needs a PKCS11 provider for the TPM 6771289 Solaris needs TCG support
2009-02-106798660 Cadmium .NOT file processing problem with CWD relative file pathsAli Bahrami5-10/+70
Contributed by Richard Lowe 6785284 Mapfile versioning rules need to be more visible to gatelings 6800164 Standard file exclusion mechanism needed for Cadmium tools
2008-11-216449514 move OpenSSL from /usr/sfw to /usr, /libJohn.Zolnowsky@Sun.COM6-32/+20
6457487 clean up Makefile for cmd/openssl 6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674 6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674 6700122 cryptosvc should be able to start before filesystem/usr
2008-11-176756692 ugly prompt for pkcs11 token pin when using pktoolWyllys Ingersoll1-3/+4
6763087 pktool signcsr dumps core in some conditions due to uninitialized variables. 6744183 pktool doesn't accept "KPClientAuth", "KPKdc" or "scLogon" as valid ekus
2008-08-296737647 token name matching logic in KMF is brokenWyllys Ingersoll1-5/+2
2008-08-04backout 6449514/6686002/6686004/6700122: needs more worksuha6-15/+14
2008-08-016449514 move OpenSSL from /usr/sfw to /usr, /libjohnz6-14/+15
6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674 6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674 6700122 cryptosvc should be able to start before filesystem/usr
2008-05-20PSARC 2008/306 pktool CLI update (dir option correction)wyllys5-11/+62
6670712 cert of dsa type with key pair can not signcsr of rsa type, viceversa. 6670714 pktool gencert keystore=nss and keytype=dsa FAIL, parameter error 6670715 pktool gencsr keystore=nss and token="install" (something not "internal") core dumped 6670725 pktool signcsr command fails to update the keyusage values. 6699535 pktool operations should not have "dir" option for file-based keystore 6700175 fix for 6654080 is not complete
2008-05-066494306 need single source for bignum codefr412791-2/+2
--HG-- rename : usr/src/uts/sun4u/rsa/Makefile => deleted_files/usr/src/uts/sun4u/rsa/Makefile rename : usr/src/uts/sun4u/rsa/mont_mulf.s => usr/src/common/bignum/sun4u/mont_mulf_kernel_v9.s rename : usr/src/uts/intel/rsa/Makefile.32 => usr/src/uts/intel/bignum/Makefile.32 rename : usr/src/uts/intel/rsa/Makefile.64 => usr/src/uts/intel/bignum/Makefile.64
2008-05-026683064 check_rtime could do with some spring cleaningrie2-13/+7
2008-04-036669251 KMF needs to support empty PINswyllys1-49/+93
6669357 KMF pkcs11 incorrectly sets some attributes when creating certificates and keys 6679525 [CLI] Subcommands in pktool's help are overtranslated 6680520 pktool needs to prompt for PIN more often
2008-02-20PSARC 2008/037 new EKU support for pktool and kmfcfgwyllys16-371/+757
6648052 pktool(1) could allow certificate signing and verification 6652751 kmf_get_kmf_error_str() doesn't know about KMF_ERR_ATTR_NOT_FOUND 6654080 kmf_verify_data() should use algorithm from the cert if KMF_ALGORITHM_INDEX_ATTR is missing 6654205 kmf_find_prikey_by_cert() should be public 6654910 kmf_validate_cert() won't get over non-existent x509v3 extensions in TA 6660235 Command summary on pktool help should be localizable. 6660622 KMF needs API to determine format of raw data
2008-01-116643119 kmf_validate_cert() should download CRL only when the previous one ↵wyllys1-1/+1
has expired (fix lint)
2008-01-116630137 Un-initialized variable caused a wrong branch in KMFPK11_StoreKeywyllys2-51/+84
6643119 kmf_validate_cert() should download CRL only when the previous one has expired
2007-12-076634339 kmf_find_key returns error when searching for raw (RSA) public keywyllys3-45/+91
2007-12-06PSARC 2007/604 KMF Pluggability Enhancementshylee7-24/+454
6621224 KMF Dynamic Plugin Support 6621231 pktool list keystore=file dir=/tmp/test prints out incorrect output
2007-11-286620497 KMF does not build proper PKCS12 PDUswyllys7-311/+821
6624214 kmf_get_cert_extn can leak memory 6629477 libkmf is crashed in OpenSSL_StoreKey if keytype is not KMF_RSA or KMF_DSA
2007-10-226614385 libkmf should be able to open plugins on demandwyllys3-37/+45
2007-10-106612107 pktool list objtype=cert Serial: odditywyllys3-181/+242
6612173 pktool interactive mode should ask more questions 6612636 pktool delete is inconsistent 6613494 pktool fails creation outkey = in dir= if there is a file/dir in current dir of same name
2007-09-256607135 KMF incorrectly labels public keys as privatewyllys1-3/+38
2007-09-176546405 KMF Interfaces need to be extensible (fix lint)wyllys1-0/+1
2007-09-14PSARC 2007/426 KMFAPI Interface Taxonomy Changewyllys27-5654/+7940
PSARC 2007/465 pktool symmetric key enhancements 6546405 KMF Interfaces need to be extensible 6547894 pktool should be more detailed 6590232 pktool should import and export generic keys
2007-08-086585894 pktool import usage shows bogus nickname parameterhylee1-24/+24
6585913 pktool import keystore=nss does not work for PEM encoded certs
2007-05-246558467 memory leak in kcfdwyllys1-156/+151
2007-05-036455242 nightly should be able to preserve all proto areas from a single build.kupfer2-2/+8
6467531 nightly(1) needs option to generate OpenSolaris delivery --HG-- rename : usr/src/pkgdefs/SUNWftpu/copyright => usr/src/cmd/cmd-inet/usr.sbin/in.ftpd/LICENSE
2007-04-276550297 elfsign mysteriously fails with missing packageswyllys1-27/+32
2007-04-236549186 OpenSSL_FindCert incorrectly tracks matched certificateswyllys1-2/+5
2007-04-196547594 KMF incorrectly processes pkcs12 fileswyllys2-22/+21
6547853 KMF is too strict about KeyUsage
2007-04-166546494 KMF_FindKey changed prematurely, should still allow 0 num_keyswyllys1-3/+0
2007-04-136542973 KMF_FindCert is racywyllys3-39/+94
2007-04-066538315 KMF should duplicate KMF_X509_NAME records instead of copying ptr valueshaimay3-15/+36
2007-04-026512691 kssladm dumps core when given invalid inputkrishna1-1/+1
2007-04-026527799 KMF_GetFileFormat() can not recognize a valid P12 filehylee1-38/+118
2007-03-236537357 KMF improperly encodes CSR version numberswyllys1-2/+1
6537358 KMF should allow CSRs to be created with empty Subject names
2007-03-156531818 libkmf has too many dependencies on libpkcs11wyllys10-127/+125
6534811 KMF openssl verify routine should test for NULL hash method. 6534827 KMF_ReadInputFile should not require a handle
2007-03-13PSARC 2007/094 encrypt(1) / mac(1) token key supporthylee4-5/+154
4868006 encrypt(1) and mac(1) needs to support token objects 6517162 pktool genkey needs to support generic secret key
2007-03-036523959 KMF needs keystore specific Verify operationswyllys13-248/+867
--HG-- rename : usr/src/lib/libkmf/include/oidsalg.h => deleted_files/usr/src/lib/libkmf/include/oidsalg.h
2007-02-216525220 KMF_ValidateCert() and KMF_FindCertInCRL() should take a subject ↵hylee3-81/+55
certificate as input
2007-01-176509342 Code licenses for KMF need to be cleaned up.haimay23-422/+161
2007-01-116501154 kssladm could use KMFwyllys9-107/+451
--HG-- rename : usr/src/cmd/cmd-inet/usr.sbin/kssl/kssladm/openssl_util.c => usr/src/cmd/cmd-inet/usr.sbin/kssl/kssladm/ksslutil.c
2006-11-276495595 KMF incorrectly checks the CA constraintwyllys2-16/+35
6495596 KMF_OpenSSL plugin incorrectly clears memory from returned cert list.
2006-11-126224192 Solaris needs unified key management interfaces (fix clobber, ↵wyllys2-10/+10
EXPORT_SRC build)