5591 initialisation inversion of component order in cmd-crypto/elfsign.c 5620 cstyle updates for cmd/cmd-crypto and lib/libkmf Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: David Höppner <0xffea@gmail.com> Reviewed by: Josef "Jeff" Sipek <jeffpc@josefsipek.net> Approved by: Dan McDonald <danmcd@omniti.com>

2077 lots of unreachable breaks in illumos gate Reviewed by: Dan McDonald <danmcd@nexenta.com> Reviewed by: Garrett D'Amore <garrett@damore.org> Approved by: Richard Lowe <richlowe@richlowe.net>

6860037 pktool can't find certificate when there is only one on the token 6794511 Improved pktool Error Reporting 6744775 pktool error message for non-existant file could be better

6847622 Segmentation faults when running pktool in snv_116

6721979 pktool fails to delete other objects if keys are not found first 6721984 pktool must store keys before storing certs when importing into NSS

6710916 pktool needs to report error when "dir" option is present but not necessary

PSARC 2008/306 pktool CLI update (dir option correction) 6670712 cert of dsa type with key pair can not signcsr of rsa type, viceversa. 6670714 pktool gencert keystore=nss and keytype=dsa FAIL, parameter error 6670715 pktool gencsr keystore=nss and token="install" (something not "internal") core dumped 6670725 pktool signcsr command fails to update the keyusage values. 6699535 pktool operations should not have "dir" option for file-based keystore 6700175 fix for 6654080 is not complete

6669251 KMF needs to support empty PINs 6669357 KMF pkcs11 incorrectly sets some attributes when creating certificates and keys 6679525 [CLI] Subcommands in pktool's help are overtranslated 6680520 pktool needs to prompt for PIN more often

6620497 KMF does not build proper PKCS12 PDUs 6624214 kmf_get_cert_extn can leak memory 6629477 libkmf is crashed in OpenSSL_StoreKey if keytype is not KMF_RSA or KMF_DSA

6546405 KMF Interfaces need to be extensible (fix lint)

PSARC 2007/426 KMFAPI Interface Taxonomy Change PSARC 2007/465 pktool symmetric key enhancements 6546405 KMF Interfaces need to be extensible 6547894 pktool should be more detailed 6590232 pktool should import and export generic keys

PSARC 2005/074 Solaris Key Management Framework 6224192 Solaris needs unified key management interfaces --HG-- rename : usr/src/cmd/cmd-crypto/pktool/biginteger.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/biginteger.h rename : usr/src/cmd/cmd-crypto/pktool/derparse.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/derparse.c rename : usr/src/cmd/cmd-crypto/pktool/derparse.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/derparse.h rename : usr/src/cmd/cmd-crypto/pktool/osslcommon.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/osslcommon.c rename : usr/src/cmd/cmd-crypto/pktool/osslcommon.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/osslcommon.h rename : usr/src/cmd/cmd-crypto/pktool/p12common.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/p12common.c rename : usr/src/cmd/cmd-crypto/pktool/p12common.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/p12common.h

PSARC/2005/290 pktool(1) alternate token support PSARC/2005/634 pktool CLI update 6288840 pktool(1) alternate token support 6332420 change pktool CLI to use attr=value format

PSARC 2004/124 pktool enhancements to support object migration and softtoken interoperability PSARC 2005/019 pktool(1) list/delete updates 4931202 Provide import utility from PKCS12 file to softtoken's keystore 5059459 provide utility to export-to-PKCS#12-file from softttoken 5059461 pktool(1) needs subcommands to list and delete objects in softtoken 6216772 update pktool(1) list/delete subcommands 6278459 add "tokens" subcommand to pktool(1) 6285539 E_NAME_USED_NOT_DEF2 lint error for ENGINE_load_builtin_engines