Patch-ID# 118371-03
Keywords: elfsign libike keystore memory libpkcs11
Synopsis: SunOS 5.10: elfsign Patch
Date: May/24/2005


Install Requirements: Reconfigure immediately after patch is installed                      
                      Install in Single User Mode                      
                      
Solaris Release: 10

SunOS Release: 5.10

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 118372

Topic: SunOS 5.10: elfsign Patch

Relevant Architectures: sparc

BugId's fixed with this patch: 4987141 5019131 5057756 6196062 6214106 6214824 6216464 6218014 6218030 6220136 6221396 6222046 6222935 6238177 6238962 6239551

Changes incorporated in this version: 6238177 6238962 6239551

Patches accumulated and obsoleted by this patch: 119265-02

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/bin/elfsign
/usr/lib/inet/certdb
/usr/lib/inet/certlocal
/usr/lib/inet/certrldb
/usr/lib/inet/in.iked
/usr/lib/libelfsign.so.1
/usr/lib/libike.so.1

Problem Description:

6238177 ikecert certlocal -a dumps core
6238962 ike cert cache has artificially small maximum value
6239551 in.iked doesn't parse config.sample as expected
 
(from 118371-02)
 
        This patch revision was generated to accumulate and obsolete
        the changes introduced in Solaris Update s10u1 feature point
        patch 119265-02.
 
(from 118371-01)
 
5057756 elfsign should put OU in subject name in its own AttributeTypeAndValue
6214106 elfsign damages some executables
 
(from 119265-02)
 
Uprev due to the intersection between Feature and Generic gate
 
(from 119265-01)
 
4987141 Misleading comments in do_p1getdel() function.
5019131 IKE should use uCF's libpkcs11 by default for performance improvement
6196062 Drop SafeNet QuickSec 2.1 into libike
6214824 Update NAT-T Support to full RFC 3947 compliance.
6216464 Memory leak if ssh_ike_connect_ipsec() fails immediately
6218014 qs21 putback broke tools/ version of elfsign
6218030 Fix for 6218014 needs a more elegant solution
6220136 elfsign request fails
6221396 libike PKCS#11 D-H native glue needs to guard against trimmed leading-zeroes.
6222046 usr/src/lib/libike needed in its entirety to build usr/src/tools
6222935 Keystore generation is broken post-qs21

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-10 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
Not all patches listed in this section as needed for the completion
of a fix or feature, may be available at the same time as this patch.
This allows the remaining fixes/features to be made available sooner.
 
NOTE 1: If you're planning to set up Zones on this system, please
        make sure to install the following patch:
 
        119015-01 (or greater)  6216195  zone installation confused by
                                UPDATE=yes in pkginfo(4) file.

README -- Last modified date:  Tuesday, May 24, 2005

