OBSOLETE Patch-ID# 147159-08

	***********************************************************
	NOTE: This patch may contain one or more OEM-specific platform ports.
	      See the appropriate OEM_NOTES file within the patch for
	      information specific to these platforms.
	      DO NOT INSTALL this patch on an OEM system if a corresponding
	      OEM_NOTES file is not present (or is present, but instructs not
	      to install the patch), unless the OEM vendor directs otherwise.
	***********************************************************

7197235 RSA-1K and RSA-2K crypto not accelerated on T4 with Solaris 10U10
 
(from 147159-07)
 
7105375 64-bit OTD/iWS crashes with invalid address alignment in soft_[get|set]_operationstate()
 
(from 147159-06)
 
7082326 pkcs11_dsa_do(sign/verify) failure, on T3 systems, with dss1 as the hash method engine
 
(from 147159-05)
 
7170056 problem with crypto: OpenSSL
7162790 problem with crypto: OpenSSL
7164437 problem with crypto: OpenSSL
7166196 BUF_MEM_grow_clean returns incorrect error string
 
(from 147159-04)
 
6935670 double-locking in kernel_delete_all_sessions
7113213 deadlock between kernel_acquire_all_slots_mutexes and C_SignInit functions hangs Java application
 
(from 147159-03)
 
7088127 ipsecconf -F after T-patch 147159-01 throws undefined symbol errors
 
(from 147159-02)
 
7005228 memory leaks in libkmsagent
7012935 pkcs11_kms agent not respecting key state value from OKM
7023053 pkcs11_kms does not verify PIN set correctly due to incorrect path
7026016 pkcs11kms -- invalid passphrase errors being logged in KMSAgentLog.log
7029587 objlabels.lst handling is fragile
7031755 pkcs11_kms agent -- can not enroll pkcs11 agent to OKM using IPv6 protocol
7040064 search_for_objects() may unlock an already unlocked mutex
7055244 profile files not properly protected for multi-process access
7063049 kms agent rewrites cluster.cfg file unnecessarily during LoadProfile
7065602 KMSAgent Log -- failover message logged is not clear to user
7068481 pkcs11_kms agent not updating client cluster.cfg with current OKM cluster status
 
(from 147159-01)
 
7030953 AES CBC mode code path spends 50% time in non-encryption operations
7032670 AES-128-ECB 16KB encryption on T4 can be significantly better
7032698 AES-128-CFB128 16KB encryption (via ucrypto API) on T4 can be significantly better
7033814 assertion failure in OpenSSL speed RSA-4096 test via pkcs11 engine on T4
7036405 heavy mutex contention in libumem results in negative scaling of multi-threaded RSA test
7045416 tight-loop optimization of digest algorithms for T4
7048794 64-bit libsoftcrypto not enabled for T4
7069494 domain migration broken on T4, causes SSL read error: s3_pkt.c, line 478

--------------------------------
 
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' commands provided with Solaris.
 
The following example installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/123456-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 123456-07
 
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.

-----------------------------
 
None.