summaryrefslogtreecommitdiff
path: root/usr/src/lib/pkcs11
AgeCommit message (Collapse)AuthorFilesLines
2022-03-15OS-8361 IPD 4 (man page renumbering) tracking issueDan McDonald1-3/+3
Reviewed by: Brian Bennett <brian.bennett@joyent.com> Approved by: Brian Bennett <brian.bennett@joyent.com>
2021-04-0913487 want mapfile-based assertions about symbol propertiesRichard Lowe2-10/+72
Reviewed by: Robert Mustacchi <rm@fingolfin.org> Reviewed by: Jason King <jason.brian.king@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2021-03-1213519 pkcs11_tpm: symbol 'hPrivateLeafKey' is multiply-definedToomas Soome1-2/+2
Reviewed by: Andy Fiddaman <andy@omniosce.org> Reviewed by: Jason King <jason.brian.king+illumos@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2020-11-0613196 C_DeriveKey() doesn't always set object handle valueJason King1-2/+24
Reviewed by: C Fraire <cfraire@me.com> Reviewed by: Andy Fiddaman <andy@omniosce.org> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Dan McDonald <danmcd@joyent.com>
2020-10-1313184 Stop translating ld(1) options through cw(1)Richard Lowe2-2/+2
Reviewed by: Jason King <jason.brian.king+illumos@gmail.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Approved by: Robert Mustacchi <rm@fingolfin.org>
2020-07-1012942 pkcs11_softtoken pbkdf2 key derivation can crashJason King1-10/+3
Reviewed by: Robert Mustacchi <rm@fingolfin.org> Approved by: Dan McDonald <danmcd@joyent.com>
2020-07-0612856 pkcs11_softtoken should validate session and object handlesJason King11-156/+273
Reviewed by: Robert Mustacchi <rm@fingolfin.org> Approved by: Dan McDonald <danmcd@joyent.com>
2020-06-1512796 pcks11_softtoken C_GetMechanismList() should validate its argumentsJason King1-1/+4
Reviewed by: Andrew Stormont <andyjstormont@gmail.com> Reviewed by: Sebastian Wiedenroth <wiedi@frubar.net> Reviewed by: Juraj Lutter <juraj@lutter.sk> Approved by: Dan McDonald <danmcd@joyent.com>
2020-05-0412454 remove lint library machineryRichard Lowe25-129/+59
Reviewed by: Andy Fiddaman <andy@omniosce.org> Reviewed by: Gordon Ross <gwr@nexenta.com> Approved by: Dan McDonald <danmcd@joyent.com>
2020-01-2111966 CTR mode tries to be both a stream and block cipher and fails at bothJason King2-43/+54
Reviewed by: Dan McDonald <danmcd@joyent.com> Reviewed by: Robert Mustacchi <rm@fingolfin.org> Approved by: Gordon Ross <gordon.w.ross@gmail.com>
2019-11-1211825 PKCS#11 CKM_AES_CBC_PAD decryption can failJason King1-191/+624
Reviewed by: Dan McDonald <danmcd@joyent.com> Approved by: Gordon Ross <gordon.w.ross@gmail.com>
2019-10-0311265 Add support for SHA512_224 and SHA512_256 to KCF and PKCS#11Jason King3-17/+54
Reviewed by: Andy Fiddaman <omnios@citrus-it.co.uk> Reviewed by: Dan McDonald <danmcd@joyent.com> Approved by: Gordon Ross <gordon.w.ross@gmail.com>
2019-08-1611528 Makefile.noget can get goneJohn Levon10-10/+10
11529 Use -Wno-maybe-initialized Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Robert Mustacchi <rm@joyent.com>
2019-06-2511154 pkcs11_tpm: NULL pointer errorsToomas Soome2-3/+3
Reviewed by: Jason Lippert <jason@glasspelican.ca> Approved by: Dan McDonald <danmcd@joyent.com>
2019-06-2511153 pkcs11_softtoken: NULL pointer errorsToomas Soome1-1/+1
Reviewed by: Jason Lippert <jason@glasspelican.ca> Approved by: Dan McDonald <danmcd@joyent.com>
2019-06-2511152 pkcs11_kernel: NULL pointer errorsToomas Soome1-1/+1
Reviewed by: Peter Tribble <peter.tribble@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2019-06-2511151 libpkcs11: NULL pointer errorsToomas Soome4-31/+31
Reviewed by: Jason Lippert <jason@glasspelican.ca> Reviewed by: Jason King <jbk@joyent.com> Approved by: Dan McDonald <danmcd@joyent.com>
2019-06-0611097 SPARC needs some instances of POST_PROCESS_O to be POST_PROCESS_S_OPeter Tribble1-3/+4
Reviewed by: Andrew Stormont <andyjstormont@gmail.com> Reviewed by: Norm Jacobs <naj@snapcon.com> Reviewed by: Andy Fiddaman <omnios@citrus-it.co.uk> Reviewed by: Gergő Doma <domag02@gmail.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2019-05-0310816 ctf_dwarf_convert_type() relies on un-initialized idJohn Levon2-7/+8
10817 ctfconvert -i option is mis-handled 10818 Improve ctfconvert error messages 10819 ctfconvert should handle empty dies 10820 ctfconvert -i never converts 10821 bad free in ctf_dwarf_init_die 10815 shouldn't build gcore.c as part of kmdb Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Jerry Jelinek <jerry.jelinek@joyent.com> Approved by: Gordon Ross <gwr@nexenta.com>
2019-02-1310361 usr/lib - stop lint library generation and packagingAndy Fiddaman3-108/+0
Reviewed by: Jason King <jason.king@joyent.com> Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Frederik Wessels <wessels147@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2019-01-1410079 smatch Makefile changes for usr/src/libJohn Levon6-3/+26
Reviewed by: Andy Fiddaman <andy@omniosce.org> Approved by: Robert Mustacchi <rm@joyent.com>
2018-12-201228 Add CCM and GCM mode support to AES in pkcs11_softtokenJason King19-1417/+1119
Reviewed by: Dan McDonald <danmcd@joyent.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Approved by: Richard Lowe <richlowe@richlowe.net>
2018-10-159876 Move crypto2pkcs11_error_number to libcryptoutilJason King2-110/+2
Reviewed by: Dan McDonald <danmcd@joyent.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Reviewed by: Andy Fiddaman <omnios@citrus-it.co.uk> Reviewed by: C Fraire <cfraire@me.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2018-09-289856 pkcs11_tpm.so.1 changes syslog facilityGary Mills1-5/+12
Reviewed by: Jason King <jason.brian.king@gmail.com> Reviewed by: Andy Fiddaman <omnios@citrus-it.net> Approved by: Dan McDonald <danmcd@joyent.com>
2018-08-079698 pkcs11 C_Digest() is too restrictive in inputJason King3-5/+6
Reviewed by: Dan McDonald <danmcd@joyent.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Yuri Pankov <yuripv@yuripv.net> Reviewed by: Igor Kozhukhov <igor@dilos.org> Reviewed by: Matt Barden <matt.barden@nexenta.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2018-08-019642 PKCS#11 softtoken should use explicit_bzeroJason King21-497/+429
Reviewed by: Yuri Pankov <yuripv@yuripv.net> Reviewed by: Andy Fiddaman <omnios@citrus-it.co.uk> Reviewed by: Ken Mays <kmays2000@gmail.com> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Dan McDonald <danmcd@joyent.com>
2018-02-269156 Remove openssl dependency from pkcs11_tpmJason King3-64/+41
Reviewed by: Andy Fiddaman <omnios@citrus-it.co.uk> Reviewed by: Igor Kozhukhov <igor@dilos.org> Reviewed by: Dan McDonald <danmcd@joyent.com> Approved by: Gordon Ross <gwr@nexenta.com>
2018-02-229155 pkcs11: this statement may fall throughToomas Soome1-0/+1
Reviewed by: Jason King <jason.brian.king@gmail.com> Reviewed by: Sebastian Wiedenroth <sebastian.wiedenroth@skylime.net> Approved by: Richard Lowe <richlowe@richlowe.net>
2018-02-069027 Makefiles need to specify C99 mode consistentlyYuri Pankov1-1/+1
Reviewed by: Rich Lowe <richlowe@richlowe.net> Approved by: Hans Rosenfeld <hans.rosenfeld@joyent.com>
2017-11-305869 Need AES CMAC support in KCF+PKCS11Matt Barden8-33/+480
Portions contributed by: Jason King <jason.king@joyent.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Dan McDonald <danmcd@joyent.com> Approved by: Gordon Ross <gwr@nexenta.com>
2017-02-227812 Remove gender specific languageDaniel Hoffman1-2/+3
Reviewed by: Matt Ahrens <mahrens@delphix.com> Reviewed by: Prakash Surya <prakash.surya@delphix.com> Reviewed by: Steve Gonczi <steve.gonczi@delphix.com> Reviewed by: Chris Williamson <chris.williamson@delphix.com> Reviewed by: George Wilson <george.wilson@delphix.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2016-12-226239 Add PKCS#11 v2.40 supportJason King8-1224/+1331
6240 pkcs11_mech2keytype returns incorrect key type for CKM_DH_PKCS_PARAMETER_GEN Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: Robert Mustacci <rm@joyent.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Approved by: Richard Lowe <richlowe@richlowe.net>
2014-06-061667 pkcs11 may deadlock when multi-threaded consumers forkDan McDonald2-6/+16
Reviewed by: Garrett D'Amore <garrett@damore.org> Reviewed by: Saso Kiselkov <skiselkov.ml@gmail.com> Approved by: Gordon Ross <gordon.ross@nexenta.com>
2014-05-20backout 4853: breaks lintRobert Mustacchi1-6/+1
2014-05-194853 illumos-gate is not lint-clean when built with openssl 1.0Alexander Pyhalov1-1/+6
Reviewed by: Keith Wesolowski <keith.wesolowski@joyent.com> Reviewed by: Alexander Eremin <alexander.eremin@nexenta.com> Approved by: Robert Mustacchi <rm@joyent.com>
2013-10-234215 pkcs11_tpm botches shared library initialization, murders its friendsRichard Lowe2-3/+0
Reviewed by: Igor Kozhukhov <ikozhukhov@gmail.com> Reviewed by: Garrett D'Amore <garrett.damore@gmail.com> Approved by: Dan McDonald <danmcd@nexenta.com>
2013-08-304072 make clobber leaves trashGordon Ross1-0/+2
Reviewed by: Albert Lee <trisk@nexenta.com> Reviewed by: Dan McDonald <danmcd@nexenta.com> Reviewed by: Marcel Telka <marcel.telka@nexenta.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Garrett D'Amore <garrett@damore.org>
2013-08-163915 Add adjuncts support to the buildKeith M Wesolowski1-2/+2
Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Dan McDonald <danmcd@nexenta.com>
2013-07-293882 Remove xmod & friendsJosef 'Jeff' Sipek2-55/+0
Reviewed by: Dan McDonald <danmcd@nexenta.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Richard Lowe <richlowe@richlowe.net>
2012-09-222933 compiler warning gags need better granularityRichard Lowe11-2/+45
Reviewed by: Eric Schrock <eric.schrock@delphix.com> Approved by: Garrett D'Amore <garrett@damore.org>
2012-02-022111 begone, pkcs11_kms!Joshua M. Clulow32-9989/+0
Reviewed by: Alexander Eremin <alexander.eremin@nexenta.com> Reviewed by: Jason King <jason.brian.king@gmail.com> Reviewed by: Garrett D'Amore <garrett@damore.org> Approved by: Richard Lowe <richlowe@richlowe.net>
2012-02-182077 lots of unreachable breaks in illumos gateMilan Jurik8-79/+66
Reviewed by: Dan McDonald <danmcd@nexenta.com> Reviewed by: Garrett D'Amore <garrett@damore.org> Approved by: Richard Lowe <richlowe@richlowe.net>
2010-10-09289 invalid padding when using java pkcs11 providerJason King1-2/+2
Reviewed by: garrett@nexenta.com, gordon.w.ross@gmail.com Approved by: richlowe@richlowe.net
2010-09-13188 should keep unused closed-bins out of the proto areaGarrett D'Amore2-2/+1
193 kcfd removal causes check_rtime noise 116 README mentioned non existing usr/illumos Reviewed by: richlowe@richlowe.net, gwr@nexenta.com Approved by: richlowe@richlowe.net
2010-09-126 Need open kcfdGarrett D'Amore7-660/+10
Reviewed by: gwr@nexenta.com, richlowe@richlowe.net, matt@greenviolet.net Approved by: richlowe@richlowe.net
2010-08-096974684 libpkcs11 performance can be improved with less restrictive dlopen() ↵Valerie Bubb Fenwick2-9/+14
flags 6975112 libpkcs11 shouldn't try to dlclose its own metaslot
2010-07-286959099 T2 Crypto Drivers (ncp, n2cp, n2rng) need to implement self tests ↵Misaki Miyashita1-1/+2
for FIPS 140-2 compliance
2010-07-196948723 Crypto to pkcs11 error mapping has wrong boundary checksZdenek Kotala2-67/+13
6936557 kernel_get_func_list does not set fl_verify* flags 6949122 return is missing in aes_check_mech_param in aes crypto module
2010-07-016965723 libsoftcrypto symbol capabilities rely on compiler generated ↵Rod Evans1-1/+8
capabilities - gcc failure
2010-06-28PSARC 2010/195 PKCS11 KMS ProviderWyllys Ingersoll32-3/+9990
6944296 Solaris needs a PKCS#11 provider to allow access to KMS keystore functionality