6715 Remove MD2 from libkmf Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Igor Kozhukhov <ikozhukhov@gmail.com> Reviewed by: Saso Kiselkov <skiselkov.ml@gmail.com> Approved by: Garrett D'Amore <garrett@damore.org>

5878 Additional lint fixes for sunstudio12.1 and more modern OpenSSL Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org> Approved by: Gordon Ross <gordon.w.ross@gmail.com>

5591 initialisation inversion of component order in cmd-crypto/elfsign.c 5620 cstyle updates for cmd/cmd-crypto and lib/libkmf Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: David Höppner <0xffea@gmail.com> Reviewed by: Josef "Jeff" Sipek <jeffpc@josefsipek.net> Approved by: Dan McDonald <danmcd@omniti.com>

backout 4853: breaks lint

4853 illumos-gate is not lint-clean when built with openssl 1.0 Reviewed by: Keith Wesolowski <keith.wesolowski@joyent.com> Reviewed by: Alexander Eremin <alexander.eremin@nexenta.com> Approved by: Robert Mustacchi <rm@joyent.com>

1665 Illumos wont build against openssl 1.0.0 Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Keith Wesolowski <keith.wesolowski@joyent.com> Reviewed by: Joshua M. Clulow <josh@sysmgr.org> Approved by: Albert Lee <trisk@nexenta.com>

6944179 kmf_sign_cert needs more info about signing algorithm 6944121 KMF should add Basic-Constraint when keyCertSign EKU is set 6943253 pktool should ask to overwrite a CSR file if it already exists 6943234 pktool online help wrongly suggests we can delete a key based on its subject-DN 6940180 certClass should be called privClass (or just class) in KMFPK11_FindPrikeyByCert() 6940146 kmf_sign_data() returns KMF_ERR_INTERNAL but the PKCS#11 plugin returns KMF_ERR_MISSING_ERRCODE 6938522 kmf_openssl.so.1 clobbers OpenSSL locking callbacks

PSARC 2010/032 EC and SHA2 for KMF 6902640 pktool/KMF needs to support ECDSA keys and certificates 6787016 pktool can offer the ability to generate RSA keypairs

6864896 libkmf leaks memory

PSARC 2008/037 new EKU support for pktool and kmfcfg 6648052 pktool(1) could allow certificate signing and verification 6652751 kmf_get_kmf_error_str() doesn't know about KMF_ERR_ATTR_NOT_FOUND 6654080 kmf_verify_data() should use algorithm from the cert if KMF_ALGORITHM_INDEX_ATTR is missing 6654205 kmf_find_prikey_by_cert() should be public 6654910 kmf_validate_cert() won't get over non-existent x509v3 extensions in TA 6660235 Command summary on pktool help should be localizable. 6660622 KMF needs API to determine format of raw data

6634339 kmf_find_key returns error when searching for raw (RSA) public key

6620497 KMF does not build proper PKCS12 PDUs 6624214 kmf_get_cert_extn can leak memory 6629477 libkmf is crashed in OpenSSL_StoreKey if keytype is not KMF_RSA or KMF_DSA

PSARC 2007/426 KMFAPI Interface Taxonomy Change PSARC 2007/465 pktool symmetric key enhancements 6546405 KMF Interfaces need to be extensible 6547894 pktool should be more detailed 6590232 pktool should import and export generic keys

6558467 memory leak in kcfd

6549186 OpenSSL_FindCert incorrectly tracks matched certificates

6547594 KMF incorrectly processes pkcs12 files 6547853 KMF is too strict about KeyUsage

6542973 KMF_FindCert is racy

6512691 kssladm dumps core when given invalid input

6531818 libkmf has too many dependencies on libpkcs11 6534811 KMF openssl verify routine should test for NULL hash method. 6534827 KMF_ReadInputFile should not require a handle

PSARC 2007/094 encrypt(1) / mac(1) token key support 4868006 encrypt(1) and mac(1) needs to support token objects 6517162 pktool genkey needs to support generic secret key

6523959 KMF needs keystore specific Verify operations --HG-- rename : usr/src/lib/libkmf/include/oidsalg.h => deleted_files/usr/src/lib/libkmf/include/oidsalg.h

6509342 Code licenses for KMF need to be cleaned up.

6501154 kssladm could use KMF --HG-- rename : usr/src/cmd/cmd-inet/usr.sbin/kssl/kssladm/openssl_util.c => usr/src/cmd/cmd-inet/usr.sbin/kssl/kssladm/ksslutil.c

6495595 KMF incorrectly checks the CA constraint 6495596 KMF_OpenSSL plugin incorrectly clears memory from returned cert list.

PSARC 2005/074 Solaris Key Management Framework 6224192 Solaris needs unified key management interfaces --HG-- rename : usr/src/cmd/cmd-crypto/pktool/biginteger.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/biginteger.h rename : usr/src/cmd/cmd-crypto/pktool/derparse.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/derparse.c rename : usr/src/cmd/cmd-crypto/pktool/derparse.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/derparse.h rename : usr/src/cmd/cmd-crypto/pktool/osslcommon.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/osslcommon.c rename : usr/src/cmd/cmd-crypto/pktool/osslcommon.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/osslcommon.h rename : usr/src/cmd/cmd-crypto/pktool/p12common.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/p12common.c rename : usr/src/cmd/cmd-crypto/pktool/p12common.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/p12common.h