OBSOLETE Patch-ID# 142242-05


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security certificate signing t1/t2
Synopsis: Obsoleted by: 142909-17 SunOS 5.10: libpkcs11.so.1 patch
Date: Mar/26/2010


Install Requirements: Reboot after installing this patch to activate the changes delivered. An alternative may be specified in the Special Install Instructions.

Solaris Release: 10

SunOS Release: 5.10

Unbundled Product:

Unbundled Release:

Xref: This patch available for x86 as patch 141525 142048

Topic: SunOS 5.10: libpkcs11.so.1 patch

Relevant Architectures: sparc

Bugs fixed with this patch:

Sun CR # Bug #
617765015231583
643767715335250
643998915336357
656056315398867
660638415424259
663616915442357
663696015442883
666620415459633
668152715468648
673938115502889
675565515512844
678290715528725
681512015547728
684287215563992
685922015575014
686220215576855
686220715576858
686226815576902
690047715602997
690599615607010


Changes incorporated in this version: 6177650 6437677 6439989 6606384 6636169 6636960 6681527 6739381 6815120 6905996

Patches accumulated and obsoleted by this patch: 141922-02

Patches which conflict with this patch:

Patches required with this patch: 118918-24 120011-14 127127-11 137137-09 139555-08 141444-09 (or greater)

Obsoleted by: 142909-17

Files included with this patch:

/usr/lib/libcryptoutil.so.1
/usr/lib/libpkcs11.so.1
/usr/lib/security/pkcs11_kernel.so.1
/usr/lib/security/pkcs11_softtoken.so.1
/usr/lib/security/pkcs11_softtoken_extra.so.1
/usr/lib/security/sparcv9/pkcs11_kernel.so.1
/usr/lib/security/sparcv9/pkcs11_softtoken.so.1
/usr/lib/security/sparcv9/pkcs11_softtoken_extra.so.1
/usr/lib/sparcv9/libcryptoutil.so.1
/usr/lib/sparcv9/libpkcs11.so.1

Problem Description:

6177650 wrong error code returned when key does not allow requested operation
6437677 C_GenerateKey with missing CKA_VALUE_LEN attr should fail with CKR_TEMPLATE_INCOMPLETE
6439989 CKM_CMS_SIG & WTLS missing from pkcs11_mech2str mapping
6606384 SCF consumers crash after mechanisms are disabled using cryptoadm when using libumem
6636169 softtoken is confused by .nfs files
6636960 C_GetOperationState should fail if there is no active digest operation
6681527 meta_SetOperationState() doesn't return a slot session to the idle pool
6739381 memory leak in pkcs11_kernel when n2cp is used for digests
6815120 C_Logout with metaslot can leave metaslot object info in memory
6905996 arcfour should return failure on invalid key (instead of dumping core)
 
(from 142242-04)
 
6666204 meta slot opens and closes /dev/urandom needlessly for every read
 
(from 142242-03)
 
6755655 len is not set in soft_digest_common()
6842872 race condition in fork() and C_Initialize() causes deadlock in pkcs11
6859220 pkcs11_softoken.so crashes in RC4 when doing a Java benchmark
6862202 token_session mutexes are not covered by at_fork handler
6862207 PKCS11 softtoken:C_Initialize() sets softtoken_initialized to TRUE also when it fails
6862268 C_Initialize() does not correctly clean resources when it fails
6900477 libpkcs11 needs to be friendlier
 
(from 142242-02)
 
	This revision accumulates generic Sustaining patch 141922-02
	into Solaris S10U8 update.
 
(from 142242-01)
 
	This revision accumulates generic Sustaining patch 141922-01
	into Solaris S10U8 update.
 
(from 141922-02)
 
6560563 libpkcs11.so should handle premature library calls better
 
(from 141922-01)
 
6782907 certificate signing request (CSR) using certutil fails on T1/T2 based systems


Patch Installation Instructions:
--------------------------------
 
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' commands provided with Solaris.
 
The following example installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/123456-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 123456-07
 
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.


Special Install Instructions:
-----------------------------
 
None.


README -- Last modified date: Saturday, November 10, 2012