summaryrefslogtreecommitdiff
path: root/usr/src/lib/libkmf
AgeCommit message (Collapse)AuthorFilesLines
2010-06-11PSARC/2010/177 KMF Certificate Name mapping extensionsJan Pechanec20-43/+1196
PSARC/2010/178 KMF Common Name Mapper 6942888 KMF should provide certificate to name mapping capabilities 6949176 KMF cert-to-name mapping framework needs a CN mapper
2010-04-236944179 kmf_sign_cert needs more info about signing algorithmWyllys Ingersoll4-98/+187
6944121 KMF should add Basic-Constraint when keyCertSign EKU is set 6943253 pktool should ask to overwrite a CSR file if it already exists 6943234 pktool online help wrongly suggests we can delete a key based on its subject-DN 6940180 certClass should be called privClass (or just class) in KMFPK11_FindPrikeyByCert() 6940146 kmf_sign_data() returns KMF_ERR_INTERNAL but the PKCS#11 plugin returns KMF_ERR_MISSING_ERRCODE 6938522 kmf_openssl.so.1 clobbers OpenSSL locking callbacks
2010-03-22PSARC 2010/032 EC and SHA2 for KMFWyllys Ingersoll18-1186/+1734
6902640 pktool/KMF needs to support ECDSA keys and certificates 6787016 pktool can offer the ability to generate RSA keypairs
2010-02-176864896 libkmf leaks memoryDan OpenSolaris Anderson1-30/+54
2010-01-086914632 libkmf has unused functions that should be removedWyllys Ingersoll8-777/+29
6914613 libelfsign still uses deprecated libkmf API
2009-12-306894056 libc is not cleanSurya Prakki2-21/+24
6894060 libnsl is not lint clean 6894068 libpool is not lint clean 6894073 some zone libs are not lint clean 6913623 some user land components of ON are not ss12u1 lint clean
2009-12-016904179 kcfd dies under the tender mercies of libumemWyllys Ingersoll1-7/+3
2009-10-206889197 libkmf uses realloc incorrectlyWyllys Ingersoll5-32/+143
6889730 pktool fails to add EKUs to CSR and Cert requests 6889224 pktool incorrectly generates SAN
2009-10-086887337 pktool gencert should use SHA1 instead of MD5Wyllys Ingersoll1-5/+2
2009-09-026796585 Array overrun in libkmfWyllys Ingersoll2-8/+5
6874082 KMF fails to create generic AES keys for NSS 6869630 pktool export is broken after CR 6860037 was integrated
2009-07-176852240 libelfsign should use pkcs11_softtoken instead of OpenSSL for ↵Valerie Bubb Fenwick2-22/+22
FIPS-140 integrity checking 6851814 tools elfsign is unnecessarily linked against pkcs11_softtoken
2009-07-026855407 kernel crypto module reports firmware version incorrectlyWyllys Ingersoll2-3/+1
6854979 kmf_pkcs11.so.1 has bad SONAME and versioning
2009-05-286806387 Move OpenSSL from ON to SFWMark Phalan1-2/+1
2009-03-20PSARC 2008/725 TPM SupportWyllys Ingersoll5-12/+68
6771298 Solaris needs a PKCS11 provider for the TPM 6771289 Solaris needs TCG support
2009-02-106798660 Cadmium .NOT file processing problem with CWD relative file pathsAli Bahrami5-10/+70
Contributed by Richard Lowe 6785284 Mapfile versioning rules need to be more visible to gatelings 6800164 Standard file exclusion mechanism needed for Cadmium tools
2008-11-216449514 move OpenSSL from /usr/sfw to /usr, /libJohn.Zolnowsky@Sun.COM6-32/+20
6457487 clean up Makefile for cmd/openssl 6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674 6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674 6700122 cryptosvc should be able to start before filesystem/usr
2008-11-176756692 ugly prompt for pkcs11 token pin when using pktoolWyllys Ingersoll1-3/+4
6763087 pktool signcsr dumps core in some conditions due to uninitialized variables. 6744183 pktool doesn't accept "KPClientAuth", "KPKdc" or "scLogon" as valid ekus
2008-08-296737647 token name matching logic in KMF is brokenWyllys Ingersoll1-5/+2
2008-08-04backout 6449514/6686002/6686004/6700122: needs more worksuha6-15/+14
2008-08-016449514 move OpenSSL from /usr/sfw to /usr, /libjohnz6-14/+15
6686002 move /usr/lib/libkmf and plugins to /lib - PSARC 2007/674 6686004 move libcryptoutil and libelfsign from /usr/lib to /lib - PSARC 2007/674 6700122 cryptosvc should be able to start before filesystem/usr
2008-05-20PSARC 2008/306 pktool CLI update (dir option correction)wyllys5-11/+62
6670712 cert of dsa type with key pair can not signcsr of rsa type, viceversa. 6670714 pktool gencert keystore=nss and keytype=dsa FAIL, parameter error 6670715 pktool gencsr keystore=nss and token="install" (something not "internal") core dumped 6670725 pktool signcsr command fails to update the keyusage values. 6699535 pktool operations should not have "dir" option for file-based keystore 6700175 fix for 6654080 is not complete
2008-05-066494306 need single source for bignum codefr412791-2/+2
--HG-- rename : usr/src/uts/sun4u/rsa/Makefile => deleted_files/usr/src/uts/sun4u/rsa/Makefile rename : usr/src/uts/sun4u/rsa/mont_mulf.s => usr/src/common/bignum/sun4u/mont_mulf_kernel_v9.s rename : usr/src/uts/intel/rsa/Makefile.32 => usr/src/uts/intel/bignum/Makefile.32 rename : usr/src/uts/intel/rsa/Makefile.64 => usr/src/uts/intel/bignum/Makefile.64
2008-05-026683064 check_rtime could do with some spring cleaningrie2-13/+7
2008-04-036669251 KMF needs to support empty PINswyllys1-49/+93
6669357 KMF pkcs11 incorrectly sets some attributes when creating certificates and keys 6679525 [CLI] Subcommands in pktool's help are overtranslated 6680520 pktool needs to prompt for PIN more often
2008-02-20PSARC 2008/037 new EKU support for pktool and kmfcfgwyllys16-371/+757
6648052 pktool(1) could allow certificate signing and verification 6652751 kmf_get_kmf_error_str() doesn't know about KMF_ERR_ATTR_NOT_FOUND 6654080 kmf_verify_data() should use algorithm from the cert if KMF_ALGORITHM_INDEX_ATTR is missing 6654205 kmf_find_prikey_by_cert() should be public 6654910 kmf_validate_cert() won't get over non-existent x509v3 extensions in TA 6660235 Command summary on pktool help should be localizable. 6660622 KMF needs API to determine format of raw data
2008-01-116643119 kmf_validate_cert() should download CRL only when the previous one ↵wyllys1-1/+1
has expired (fix lint)
2008-01-116630137 Un-initialized variable caused a wrong branch in KMFPK11_StoreKeywyllys2-51/+84
6643119 kmf_validate_cert() should download CRL only when the previous one has expired
2007-12-076634339 kmf_find_key returns error when searching for raw (RSA) public keywyllys3-45/+91
2007-12-06PSARC 2007/604 KMF Pluggability Enhancementshylee7-24/+454
6621224 KMF Dynamic Plugin Support 6621231 pktool list keystore=file dir=/tmp/test prints out incorrect output
2007-11-286620497 KMF does not build proper PKCS12 PDUswyllys7-311/+821
6624214 kmf_get_cert_extn can leak memory 6629477 libkmf is crashed in OpenSSL_StoreKey if keytype is not KMF_RSA or KMF_DSA
2007-10-226614385 libkmf should be able to open plugins on demandwyllys3-37/+45
2007-10-106612107 pktool list objtype=cert Serial: odditywyllys3-181/+242
6612173 pktool interactive mode should ask more questions 6612636 pktool delete is inconsistent 6613494 pktool fails creation outkey = in dir= if there is a file/dir in current dir of same name
2007-09-256607135 KMF incorrectly labels public keys as privatewyllys1-3/+38
2007-09-176546405 KMF Interfaces need to be extensible (fix lint)wyllys1-0/+1
2007-09-14PSARC 2007/426 KMFAPI Interface Taxonomy Changewyllys27-5654/+7940
PSARC 2007/465 pktool symmetric key enhancements 6546405 KMF Interfaces need to be extensible 6547894 pktool should be more detailed 6590232 pktool should import and export generic keys
2007-08-086585894 pktool import usage shows bogus nickname parameterhylee1-24/+24
6585913 pktool import keystore=nss does not work for PEM encoded certs
2007-05-246558467 memory leak in kcfdwyllys1-156/+151
2007-05-036455242 nightly should be able to preserve all proto areas from a single build.kupfer2-2/+8
6467531 nightly(1) needs option to generate OpenSolaris delivery --HG-- rename : usr/src/pkgdefs/SUNWftpu/copyright => usr/src/cmd/cmd-inet/usr.sbin/in.ftpd/LICENSE
2007-04-276550297 elfsign mysteriously fails with missing packageswyllys1-27/+32
2007-04-236549186 OpenSSL_FindCert incorrectly tracks matched certificateswyllys1-2/+5
2007-04-196547594 KMF incorrectly processes pkcs12 fileswyllys2-22/+21
6547853 KMF is too strict about KeyUsage
2007-04-166546494 KMF_FindKey changed prematurely, should still allow 0 num_keyswyllys1-3/+0
2007-04-136542973 KMF_FindCert is racywyllys3-39/+94
2007-04-066538315 KMF should duplicate KMF_X509_NAME records instead of copying ptr valueshaimay3-15/+36
2007-04-026512691 kssladm dumps core when given invalid inputkrishna1-1/+1
2007-04-026527799 KMF_GetFileFormat() can not recognize a valid P12 filehylee1-38/+118
2007-03-236537357 KMF improperly encodes CSR version numberswyllys1-2/+1
6537358 KMF should allow CSRs to be created with empty Subject names
2007-03-156531818 libkmf has too many dependencies on libpkcs11wyllys10-127/+125
6534811 KMF openssl verify routine should test for NULL hash method. 6534827 KMF_ReadInputFile should not require a handle
2007-03-13PSARC 2007/094 encrypt(1) / mac(1) token key supporthylee4-5/+154
4868006 encrypt(1) and mac(1) needs to support token objects 6517162 pktool genkey needs to support generic secret key
2007-03-036523959 KMF needs keystore specific Verify operationswyllys13-248/+867
--HG-- rename : usr/src/lib/libkmf/include/oidsalg.h => deleted_files/usr/src/lib/libkmf/include/oidsalg.h
generated by cgit v1.2.3 (git 2.39.1) at 2025-06-24 18:16:18 +0000