6b35cb3cf158584a9408d44b9b6796564e8e1882 |
|
17-Feb-2015 |
Richard PALO <richard@NetBSD.org> |
5591 initialisation inversion of component order in cmd-crypto/elfsign.c
5620 cstyle updates for cmd/cmd-crypto and lib/libkmf
Reviewed by: Dan McDonald <danmcd@omniti.com>
Reviewed by: David Höppner <0xffea@gmail.com>
Reviewed by: Josef "Jeff" Sipek <jeffpc@josefsipek.net>
Approved by: Dan McDonald <danmcd@omniti.com> |
2c9a247fb01631b3eb3b85a1127e72f0b60ae108 |
|
23-Apr-2010 |
Wyllys Ingersoll <wyllys.ingersoll@sun.com> |
6944179 kmf_sign_cert needs more info about signing algorithm
6944121 KMF should add Basic-Constraint when keyCertSign EKU is set
6943253 pktool should ask to overwrite a CSR file if it already exists
6943234 pktool online help wrongly suggests we can delete a key based on its subject-DN
6940180 certClass should be called privClass (or just class) in KMFPK11_FindPrikeyByCert()
6940146 kmf_sign_data() returns KMF_ERR_INTERNAL but the PKCS#11 plugin returns KMF_ERR_MISSING_ERRCODE
6938522 kmf_openssl.so.1 clobbers OpenSSL locking callbacks |
e65e5c2d2f32a99e8c5f740cabae9075dab03ce7 |
|
22-Mar-2010 |
Wyllys Ingersoll <wyllys.ingersoll@sun.com> |
PSARC 2010/032 EC and SHA2 for KMF
6902640 pktool/KMF needs to support ECDSA keys and certificates
6787016 pktool can offer the ability to generate RSA keypairs |
47e946e784719ae402ace34695f67b0e6e76ae5c |
|
20-Mar-2009 |
Wyllys Ingersoll <Wyllys.Ingersoll@Sun.COM> |
PSARC 2008/725 TPM Support
6771298 Solaris needs a PKCS11 provider for the TPM
6771289 Solaris needs TCG support |
b60f2a0b921611326383e4789e0874e9e8a2e708 |
|
06-May-2008 |
fr41279 <none@none> |
6494306 need single source for bignum code
--HG--
rename : usr/src/uts/sun4u/rsa/Makefile => deleted_files/usr/src/uts/sun4u/rsa/Makefile
rename : usr/src/uts/sun4u/rsa/mont_mulf.s => usr/src/common/bignum/sun4u/mont_mulf_kernel_v9.s
rename : usr/src/uts/intel/rsa/Makefile.32 => usr/src/uts/intel/bignum/Makefile.32
rename : usr/src/uts/intel/rsa/Makefile.64 => usr/src/uts/intel/bignum/Makefile.64 |
fa60c371cd00bdca17de2ff18fe3e64d051ae61b |
|
03-Apr-2008 |
wyllys <none@none> |
6669251 KMF needs to support empty PINs
6669357 KMF pkcs11 incorrectly sets some attributes when creating certificates and keys
6679525 [CLI] Subcommands in pktool's help are overtranslated
6680520 pktool needs to prompt for PIN more often |
d00756ccb34596a328f8a15d1965da5412d366d0 |
|
21-Feb-2008 |
wyllys <none@none> |
PSARC 2008/037 new EKU support for pktool and kmfcfg
6648052 pktool(1) could allow certificate signing and verification
6652751 kmf_get_kmf_error_str() doesn't know about KMF_ERR_ATTR_NOT_FOUND
6654080 kmf_verify_data() should use algorithm from the cert if KMF_ALGORITHM_INDEX_ATTR is missing
6654205 kmf_find_prikey_by_cert() should be public
6654910 kmf_validate_cert() won't get over non-existent x509v3 extensions in TA
6660235 Command summary on pktool help should be localizable.
6660622 KMF needs API to determine format of raw data |
646cf3c6c5f9a3403fe9d15809bbbb2441deb1e2 |
|
11-Jan-2008 |
wyllys <none@none> |
6630137 Un-initialized variable caused a wrong branch in KMFPK11_StoreKey
6643119 kmf_validate_cert() should download CRL only when the previous one has expired |
73cc0e021f4115db3085cd78083c42c8be4559e3 |
|
07-Dec-2007 |
wyllys <none@none> |
6634339 kmf_find_key returns error when searching for raw (RSA) public key |
5b3e1433c6213363bcb6387e66fc84ee9ff21a5d |
|
28-Nov-2007 |
wyllys <none@none> |
6620497 KMF does not build proper PKCS12 PDUs
6624214 kmf_get_cert_extn can leak memory
6629477 libkmf is crashed in OpenSSL_StoreKey if keytype is not KMF_RSA or KMF_DSA |
4ba70ed0e487727de98a6297bc6d0a827001a390 |
|
25-Sep-2007 |
wyllys <none@none> |
6607135 KMF incorrectly labels public keys as private |
30a5e8fa1253cb33980ee4514743cf683f584b4e |
|
14-Sep-2007 |
wyllys <none@none> |
PSARC 2007/426 KMFAPI Interface Taxonomy Change
PSARC 2007/465 pktool symmetric key enhancements
6546405 KMF Interfaces need to be extensible
6547894 pktool should be more detailed
6590232 pktool should import and export generic keys |
9b37d29632d2cb262ba42f1d804f85fcb0aa3709 |
|
15-Mar-2007 |
wyllys <none@none> |
6531818 libkmf has too many dependencies on libpkcs11
6534811 KMF openssl verify routine should test for NULL hash method.
6534827 KMF_ReadInputFile should not require a handle |
c197cb9db36685d2808c057fdbe5700734483ab2 |
|
14-Mar-2007 |
hylee <none@none> |
PSARC 2007/094 encrypt(1) / mac(1) token key support
4868006 encrypt(1) and mac(1) needs to support token objects
6517162 pktool genkey needs to support generic secret key |
02744e811b15322c5f109827a116c33bfe3438b5 |
|
03-Mar-2007 |
wyllys <none@none> |
6523959 KMF needs keystore specific Verify operations
--HG--
rename : usr/src/lib/libkmf/include/oidsalg.h => deleted_files/usr/src/lib/libkmf/include/oidsalg.h |
71593db26bb6ef7b739cffe06d53bf990cac112c |
|
12-Jan-2007 |
wyllys <none@none> |
6501154 kssladm could use KMF
--HG--
rename : usr/src/cmd/cmd-inet/usr.sbin/kssl/kssladm/openssl_util.c => usr/src/cmd/cmd-inet/usr.sbin/kssl/kssladm/ksslutil.c |
99ebb4ca412cb0a19d77a3899a87c055b9c30fa8 |
|
11-Nov-2006 |
wyllys <none@none> |
PSARC 2005/074 Solaris Key Management Framework
6224192 Solaris needs unified key management interfaces
--HG--
rename : usr/src/cmd/cmd-crypto/pktool/biginteger.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/biginteger.h
rename : usr/src/cmd/cmd-crypto/pktool/derparse.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/derparse.c
rename : usr/src/cmd/cmd-crypto/pktool/derparse.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/derparse.h
rename : usr/src/cmd/cmd-crypto/pktool/osslcommon.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/osslcommon.c
rename : usr/src/cmd/cmd-crypto/pktool/osslcommon.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/osslcommon.h
rename : usr/src/cmd/cmd-crypto/pktool/p12common.c => deleted_files/usr/src/cmd/cmd-crypto/pktool/p12common.c
rename : usr/src/cmd/cmd-crypto/pktool/p12common.h => deleted_files/usr/src/cmd/cmd-crypto/pktool/p12common.h |