0N/A#

0N/A# Configuration file to allow the SunPKCS11 provider to utilize

0N/A# the Solaris Cryptographic Framework, if it is available

0N/A#

0N/A

0N/Aname = Solaris

0N/A

0N/Adescription = SunPKCS11 accessing Solaris Cryptographic Framework

0N/A

0N/Alibrary = /usr/lib/$ISA/libpkcs11.so

0N/A

0N/AhandleStartupErrors = ignoreAll

0N/A

4426N/A# Use the X9.63 encoding for EC points (do not wrap in an ASN.1 OctetString).

4426N/AuseEcX963Encoding = true

0N/A

4426N/Aattributes = compatibility

4402N/A

0N/AdisabledMechanisms = {

4142N/A# the following mechanisms are disabled due to lack of digest cloning support

4142N/A# need to fix 6414899 first

0N/A CKM_MD2

0N/A CKM_MD5

0N/A CKM_SHA_1

0N/A CKM_SHA256

0N/A CKM_SHA384

0N/A CKM_SHA512

0N/A CKM_DSA_KEY_PAIR_GEN

0N/A# the following mechanisms are disabled due to performance issues (Solaris bug 6337157)

0N/A CKM_DSA_SHA1

0N/A CKM_MD5_RSA_PKCS

0N/A CKM_SHA1_RSA_PKCS

0N/A CKM_SHA256_RSA_PKCS

0N/A CKM_SHA384_RSA_PKCS

0N/A CKM_SHA512_RSA_PKCS

3102N/A# the following mechanisms are disabled to ensure backward compatibility (Solaris bug 6545046)

3102N/A CKM_DES_CBC_PAD

3102N/A CKM_DES3_CBC_PAD

3102N/A CKM_AES_CBC_PAD

0N/A}

0N/A