Patch-ID# 118918-03

NOTE:
***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************

Keywords: libpkcs11 metaslot metaslot libpkcs11
Synopsis: SunOS 5.10: metaslot Patch
Date: Oct/11/2005


Install Requirements: Reboot immediately after patch is installed                      
                      Install in Single User Mode                      
                      
Solaris Release: 10

SunOS Release: 5.10

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 118919

Topic: SunOS 5.10: metaslot Patch

Relevant Architectures: sparc

BugId's fixed with this patch: 4691624 6195934 6197268 6197284 6199119 6204887 6215509 6228384 6231739

Changes incorporated in this version: 6228384 6231739

Patches accumulated and obsoleted by this patch: 116781-02

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/etc/crypto/pkcs11.conf
/usr/bin/pktool
/usr/lib/libcryptoutil.so.1
/usr/lib/libpkcs11.so.1
/usr/lib/security/pkcs11_kernel.so.1
/usr/lib/security/pkcs11_softtoken.so.1
/usr/lib/security/sparcv9/pkcs11_kernel.so.1
/usr/lib/security/sparcv9/pkcs11_softtoken.so.1
/usr/lib/sparcv9/libcryptoutil.so.1
/usr/lib/sparcv9/libpkcs11.so.1
/usr/sbin/cryptoadm

Problem Description:

6228384 cryptoadm gettext for usage too simplistic
6231739 cryptoadm bugfix lost "metaslot" usage keywords
 
(from 118918-02)
 
Patch respun to include complete functionality
 
(from 118918-01)
 
4691624 libpkcs11: uCF meta slot management fix for 4691624 introduced a lock violation
6199119 pk11object test program core dump with metaslot+pkcs11_kernel+Deimos configured
 
(from 116781-02)
 
6197284 implement C_UnwrapKey(<secret keys>) with decrypt/create_object when needed in pkcs11_kernel
6197268 pkcs11_kernel shouldn't reject C_GetAttributeValue() for a secret key's CKA_VALUE_LEN attr 
6204887 SEGV in process_found_objects()
6195934 pkcs11_kernel C_DecryptInit() can return with the object_mutex still held
 
(from 116781-01)
 
4691624 libpkcs11: uCF meta slot management
6199119 pk11object test program core dump with metaslot+pkcs11_kernel+Deimos configured
6215509 fix for 4691624 introduced a lock violation

Patch Installation Instructions:
--------------------------------
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-10 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
NOTE 1:  If you're planning to set up Zones on this system, please make sure to 
         install the following patch which fixes bugid 6216195 (zone installation 
         confused UPDATE=yes in pkginfo(4) file.)
 
         119015-01 (or greater)  Packaging Commands Patch
 
NOTE 2:  If you have the SUNWcry package installed, you MUST also install the
	 following patch:
 
	 118562-01 (or greater)  softtoken Patch

README -- Last modified date:  Wednesday, October 19, 2005