0N/A#

0N/A# Configuration file to allow the SunPKCS11 provider to utilize

0N/A# the Solaris Cryptographic Framework, if it is available

0N/A#

0N/A

0N/Aname = Solaris

0N/A

0N/Adescription = SunPKCS11 accessing Solaris Cryptographic Framework

0N/A

0N/Alibrary = /usr/lib/$ISA/libpkcs11.so

0N/A

0N/AhandleStartupErrors = ignoreAll

0N/A

0N/Aattributes = compatibility

0N/A

0N/A# Support only the raw encoding for an EC point

0N/Aattributes (*, CKO_PUBLIC_KEY, CKK_EC) = {

0N/A CKA_ENABLE_RAW_EC_POINT = true

0N/A}

0N/A

0N/AdisabledMechanisms = {

0N/A# the following mechanisms are disabled due to lack of digest cloning support

0N/A# need to fix 6414899 first

0N/A CKM_MD2

0N/A CKM_MD5

0N/A CKM_SHA_1

0N/A CKM_SHA256

0N/A CKM_SHA384

0N/A CKM_SHA512

0N/A CKM_DSA_KEY_PAIR_GEN

0N/A# the following mechanisms are disabled due to performance issues (Solaris bug 6337157)

0N/A CKM_DSA_SHA1

0N/A CKM_MD5_RSA_PKCS

0N/A CKM_SHA1_RSA_PKCS

0N/A CKM_SHA256_RSA_PKCS

0N/A CKM_SHA384_RSA_PKCS

0N/A CKM_SHA512_RSA_PKCS

0N/A# the following mechanisms are disabled to ensure backward compatibility (Solaris bug 6545046)

0N/A CKM_DES_CBC_PAD

0N/A CKM_DES3_CBC_PAD

0N/A CKM_AES_CBC_PAD

0N/A}

0N/A

0N/A