6897371 cryptoadm needs changes in order to support fips-140 mode in local zones
6897374 Memory leaking in kernel algorithm modules and softtoken dsa with fips enabled

PSARC/2009/447 Kernel Cryptographic Framework support for FIPS 140-2
6703950 Solaris cryptographic framework needs to implement changes for FIPS-140-2 compliance

6842872 Race condition in fork() and C_Initialize() causes deadlock in pkcs11
6862268 C_Initialize() does not correctly cleans resources when fails
6862202 token_session mutexes are not cover

6842872 Race condition in fork() and C_Initialize() causes deadlock in pkcs11
6862268 C_Initialize() does not correctly cleans resources when fails
6862202 token_session mutexes are not covered by at_fork handler
6862207 PKCS11 softtoken:C_Initialize() sets softtoken_initialized to TRUE also when it fails

show more ...

6560563 libpkcs11.so should handle premature library calls better

6439989 CKM_CMS_SIG & WTLS missing from pkcs11_mech2str mapping
6282064 C_GetSlotInfo returns CKR_SLOT_ID_INVALID when the logical provider is the only slot on the system
6177650 Wrong error

6439989 CKM_CMS_SIG & WTLS missing from pkcs11_mech2str mapping
6282064 C_GetSlotInfo returns CKR_SLOT_ID_INVALID when the logical provider is the only slot on the system
6177650 Wrong error code returned when key does not allow requested operation
6437677 C_GenerateKey with missing CKA_VALUE_LEN attr should fail with CKR_TEMPLATE_INCOMPLETE
6499687 softDSA.c should use a meaningful #define rather than a hard coded number
6773550 Crypto Framework is too strict when checking DSA key parameters
6815120 C_Logout with metaslot can leave metaslot object info in memory
6606384 SCF consumers crash after mechanisms are disabled using cryptoadm when using libumem
6636169 softtoken is confused by .nfs files
6636960 C_GetOperationState should fail if there is no active digest operation
6627939 functional test failure - got CKR_UNWRAPPING_KEY_TYPE_INCONSISTENT

show more ...

6666204 meta slot opens and closes /dev/urandom needlessly for every read
6722460 finish moving /dev/random and /dev/urandom seeding and usage to libcryptoutil

6784451 consolidate duplicative looping_read() and looping_write() code into libcryptoutil

6798660 Cadmium .NOT file processing problem with CWD relative file paths
Contributed by Richard Lowe
6785284 Mapfile versioning rules need to be more visible to gatelings
6800164 Standar

6798660 Cadmium .NOT file processing problem with CWD relative file paths
Contributed by Richard Lowe
6785284 Mapfile versioning rules need to be more visible to gatelings
6800164 Standard file exclusion mechanism needed for Cadmium tools

show more ...

6796952 bignum sparc not using optimizations in libsoftcrypto
6782907 Certificate signing request (CSR) using certutil fails on T1/T2 based systems
6609549 Sun Metaslot erroneously reports CK

6796952 bignum sparc not using optimizations in libsoftcrypto
6782907 Certificate signing request (CSR) using certutil fails on T1/T2 based systems
6609549 Sun Metaslot erroneously reports CKR_SESSION_READ_ONLY for C_DestroyObject on RW session
6728680 T2000 SoftToken slot reports absent but non-removable token when .sunw directory inaccessible

show more ...

PSARC/2008/520 SunSSH with the OpenSSL PKCS#11 engine support
6445288 ssh needs to be OpenSSL engine aware
6709963 SunSSH server leaks memory during initialization
6687401 ssh monitor sho

PSARC/2008/520 SunSSH with the OpenSSL PKCS#11 engine support
6445288 ssh needs to be OpenSSL engine aware
6709963 SunSSH server leaks memory during initialization
6687401 ssh monitor shouldn't try to log remote IP when child closed the pipe
6696629 sshd should remove alarm signal handler after authentication
6674088 userland threshold for hw offloading makes it difficult for SSL and SSH protocols
6728450 6708125 prevents parent to use the Crypto Framework after the fork(2)
6742247 ssh debug output with PACKET_DEBUG code could be more readable

show more ...

6681527 meta_SetOperationState() doesn't return a slot session to the idle pool

6708125 metaslot leaks memory upon fork() and C_Initialize()/C_GetMechanismInfo() (fix core dump)

6708125 metaslot leaks memory upon fork() and C_Initialize()/C_GetMechanismInfo()

6720197 linked list handling in crypto libraries needs to be more robust

6548350 pkcs11 pthread_atfork() covers insufficient locks

6665767 create pkcs11 sessions based on criteria beyond just matching mechanism

PSARC/2006/610 Data Encryption Kit (SUNWcry) Removal
6498066 PSARC/2006/610 Data Encryption Kit (SUNWcry) Removal

--HG--
rename : usr/src/common/openssl/crypto/sunw.c => deleted_file

PSARC/2006/610 Data Encryption Kit (SUNWcry) Removal
6498066 PSARC/2006/610 Data Encryption Kit (SUNWcry) Removal

--HG--
rename : usr/src/common/openssl/crypto/sunw.c => deleted_files/usr/src/common/openssl/crypto/sunw.c
rename : usr/src/lib/openssl/libcrypto/common/mapfile => deleted_files/usr/src/lib/openssl/libcrypto/common/mapfile
rename : usr/src/lib/openssl/libcrypto_extra/Makefile => deleted_files/usr/src/lib/openssl/libcrypto_extra/Makefile
rename : usr/src/lib/openssl/libcrypto_extra/Makefile.com => deleted_files/usr/src/lib/openssl/libcrypto_extra/Makefile.com
rename : usr/src/lib/openssl/libcrypto_extra/amd64/Makefile => deleted_files/usr/src/lib/openssl/libcrypto_extra/amd64/Makefile
rename : usr/src/lib/openssl/libcrypto_extra/i386/Makefile => deleted_files/usr/src/lib/openssl/libcrypto_extra/i386/Makefile
rename : usr/src/lib/openssl/libcrypto_extra/sparc/Makefile => deleted_files/usr/src/lib/openssl/libcrypto_extra/sparc/Makefile
rename : usr/src/lib/openssl/libcrypto_extra/sparcv9/Makefile => deleted_files/usr/src/lib/openssl/libcrypto_extra/sparcv9/Makefile
rename : usr/src/lib/openssl/libssl_extra/Makefile => deleted_files/usr/src/lib/openssl/libssl_extra/Makefile
rename : usr/src/lib/openssl/libssl_extra/Makefile.com => deleted_files/usr/src/lib/openssl/libssl_extra/Makefile.com
rename : usr/src/lib/openssl/libssl_extra/amd64/Makefile => deleted_files/usr/src/lib/openssl/libssl_extra/amd64/Makefile
rename : usr/src/lib/openssl/libssl_extra/i386/Makefile => deleted_files/usr/src/lib/openssl/libssl_extra/i386/Makefile
rename : usr/src/lib/openssl/libssl_extra/sparc/Makefile => deleted_files/usr/src/lib/openssl/libssl_extra/sparc/Makefile
rename : usr/src/lib/openssl/libssl_extra/sparcv9/Makefile => deleted_files/usr/src/lib/openssl/libssl_extra/sparcv9/Makefile
rename : usr/src/lib/pkcs11/Makefile.softtoken.amd64 => deleted_files/usr/src/lib/pkcs11/Makefile.softtoken.amd64
rename : usr/src/lib/pkcs11/Makefile.softtoken.com => deleted_files/usr/src/lib/pkcs11/Makefile.softtoken.com
rename : usr/src/lib/pkcs11/Makefile.softtoken.i386 => deleted_files/usr/src/lib/pkcs11/Makefile.softtoken.i386
rename : usr/src/lib/pkcs11/README.Makefiles => deleted_files/usr/src/lib/pkcs11/README.Makefiles
rename : usr/src/lib/pkcs11/Makefile.softtoken.sparc => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken/Makefile.softtoken.sparc.1
rename : usr/src/lib/pkcs11/Makefile.softtoken.sparcv9 => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken/Makefile.softtoken.sparcv9.1
rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/Makefile => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/Makefile
rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/Makefile.com => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/Makefile.com
rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/amd64/Makefile => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/amd64/Makefile
rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/i386/Makefile => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/i386/Makefile
rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/sparc/Makefile => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/sparc/Makefile
rename : usr/src/lib/pkcs11/pkcs11_softtoken_extra/sparcv9/Makefile => deleted_files/usr/src/lib/pkcs11/pkcs11_softtoken_extra/sparcv9/Makefile
rename : usr/src/pkgdefs/SUNWcry/Makefile => deleted_files/usr/src/pkgdefs/SUNWcry/Makefile
rename : usr/src/pkgdefs/SUNWcry/pkginfo.tmpl => deleted_files/usr/src/pkgdefs/SUNWcry/pkginfo.tmpl
rename : usr/src/pkgdefs/SUNWcry/postinstall => deleted_files/usr/src/pkgdefs/SUNWcry/postinstall
rename : usr/src/pkgdefs/SUNWcry/preremove => deleted_files/usr/src/pkgdefs/SUNWcry/preremove
rename : usr/src/pkgdefs/SUNWcry/prototype_com => deleted_files/usr/src/pkgdefs/SUNWcry/prototype_com
rename : usr/src/pkgdefs/SUNWcry/prototype_i386 => deleted_files/usr/src/pkgdefs/SUNWcry/prototype_i386
rename : usr/src/pkgdefs/SUNWcry/prototype_sparc => deleted_files/usr/src/pkgdefs/SUNWcry/prototype_sparc
rename : usr/src/pkgdefs/SUNWcryr/Makefile => deleted_files/usr/src/pkgdefs/SUNWcryr/Makefile
rename : usr/src/pkgdefs/SUNWcryr/pkginfo.tmpl => deleted_files/usr/src/pkgdefs/SUNWcryr/pkginfo.tmpl
rename : usr/src/pkgdefs/SUNWcryr/postinstall => deleted_files/usr/src/pkgdefs/SUNWcryr/postinstall
rename : usr/src/pkgdefs/SUNWcryr/preremove => deleted_files/usr/src/pkgdefs/SUNWcryr/preremove
rename : usr/src/pkgdefs/SUNWcryr/prototype_com => deleted_files/usr/src/pkgdefs/SUNWcryr/prototype_com
rename : usr/src/pkgdefs/SUNWcryr/prototype_i386 => deleted_files/usr/src/pkgdefs/SUNWcryr/prototype_i386
rename : usr/src/pkgdefs/SUNWcryr/prototype_sparc => deleted_files/usr/src/pkgdefs/SUNWcryr/prototype_sparc
rename : usr/src/uts/sparc/aes256/Makefile => deleted_files/usr/src/uts/sparc/aes256/Makefile
rename : usr/src/uts/sparc/arcfour2048/Makefile => deleted_files/usr/src/uts/sparc/arcfour2048/Makefile
rename : usr/src/uts/sparc/blowfish448/Makefile => deleted_files/usr/src/uts/sparc/blowfish448/Makefile
rename : usr/src/uts/sun4u/aes256/Makefile => deleted_files/usr/src/uts/sun4u/aes256/Makefile

show more ...

6522116 handle2session() routines can be improved in pkcs11 libraries

6648799 init operation trashes mechanism parameter

6566433 zpool create fails during jumpstart due to random_get_pseudo_bytes not random
6638710 Intermittent failures using n2cp via metaslot running pk11aesperf

6552557 provide helper function that generates pkcs#5 keys from passphrases
6554395 consolidate duplicated code in decrypt and digest
6607990 SUNW_C_KeyToObject fails to set wrap/unwrap capab

6552557 provide helper function that generates pkcs#5 keys from passphrases
6554395 consolidate duplicated code in decrypt and digest
6607990 SUNW_C_KeyToObject fails to set wrap/unwrap capability on object created from raw key
6607994 SUNW_C_KeyToObject looks like it may destroy an object that was never created
6607998 C_GetSessionInfo never returns CKR_ARGUMENTS_BAD
6608391 consolidate code that reads key data from file

show more ...

6603976 Bulk encryptions are not offloaded to hardware in a multi-process test

6602015 cryptotest dumps core

6596364 pkcs11 engine cannot be used with apache due to SSL_R_DIGEST_CHECK_FAILED error

6482533 Threshold for HW offload via PKCS11 interface