From wyllys@sac.sfbay.sun.com Tue Jun 1 11:57:42 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o51Ivga8020421 for ; Tue, 1 Jun 2010 11:57:42 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o51IveqN026835; Tue, 1 Jun 2010 13:57:41 -0500 (CDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L3C00A01NBS0E00@nwk-avmta-2.sfbay.sun.com>; Tue, 01 Jun 2010 11:57:28 -0700 (PDT) Received: from dm-sfbay-01.sfbay.sun.com ([129.145.155.118]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L3C0040HNBRGC60@nwk-avmta-2.sfbay.sun.com>; Tue, 01 Jun 2010 11:57:27 -0700 (PDT) Received: from sac.sfbay.sun.com (sac.SFBay.Sun.COM [129.146.226.132]) by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o51IvRl9006025; Tue, 01 Jun 2010 11:57:27 -0700 (PDT) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o51IvNBY020415; Tue, 01 Jun 2010 11:57:23 -0700 (PDT) Received: (from wyllys@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id o51IvNAG020411; Tue, 01 Jun 2010 11:57:23 -0700 (PDT) Date: Tue, 01 Jun 2010 11:57:23 -0700 (PDT) From: Wyllys Ingersoll Subject: OpenSSL devcrypto engine support [PSARC/2010/199 Self Review] To: PSARC-ext@sun.com Cc: crypto-discuss@opensolaris.org Message-id: <201006011857.o51IvNAG020411@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 2008 Template Version: @(#)sac_nextcase 1.70 03/30/10 SMI This information is Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved. 1. Introduction 1.1. Project/Component Working Name: OpenSSL devcrypto engine support 1.2. Name of Document Author/Supplier: Author: HuieYing Lee 1.3 Date of This Document: 01 June, 2010 4. Technical Description Template Version: @(#)sac_nextcase 1.70 03/30/10 SMI This information is Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved. 1. Introduction 1.1. Project/Component Working Name: OpenSSL devcrypto engine support 1.2. Name of Document Author/Supplier: Author: Huie-Ying Lee 1.3 Date of This Document: June 01, 2010 4. Technical Description This enhancement is to add a new "devcrypto" engine to OpenSSL. The devcrypto engine will access the cryptographic hardware providers directly through the private ioctl interface from the Solaris Cryptographic Framework, bypassing libpkcs11 and pkcs11_kernel libraries. This scheme has been blessed by Solaris Cryptographic Framework team. This engine will be implemented as a seperate shared library, and it can be used only by an OpenSSL application through the OpenSSL dynamic engine support. To support this new devcrypto engine, we also need to enable the dynamic engine support in OpenSSL, which has never been enabled in Solaris before. pkg:/system/library /usr/lib/engines/libdevcrypto.so Private /usr/lib/engines/64/libdevcrypto.so Private The release binding for this change is micro. 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: Automatic 6.6. ARC Exposure: open 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: Automatic 6.6. ARC Exposure: open From wyllys.ingersoll@oracle.com Tue Jun 1 12:01:19 2010 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o51J1Jdu020552 for ; Tue, 1 Jun 2010 12:01:19 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail3mpk.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o51J19kB006187 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 1 Jun 2010 12:01:19 -0700 (PDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L3C00A13NI47S00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 01 Jun 2010 12:01:16 -0700 (PDT) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L3C004EDNI3FU50@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 01 Jun 2010 12:01:15 -0700 (PDT) Received: from acsinet15.oracle.com (acsinet15.oracle.com [141.146.126.227]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o51J1FwS017935 for ; Tue, 01 Jun 2010 19:01:15 +0000 (GMT) Received: from acsmt354.oracle.com (acsmt354.oracle.com [141.146.40.154]) by acsinet15.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o51GdE50028429 for ; Tue, 01 Jun 2010 19:01:14 +0000 (GMT) Received: from abhmt018.oracle.com by acsmt353.oracle.com with ESMTP id 287338481275418808; Tue, 01 Jun 2010 12:00:08 -0700 Received: from [10.7.251.182] (/10.7.251.182) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 01 Jun 2010 12:00:08 -0700 Date: Tue, 01 Jun 2010 15:00:06 -0400 From: Wyllys Ingersoll Subject: PSARC 2010/199 OpenSSL devcrypto engine support To: PSARC-ext@sun.com Message-id: <4C0558B6.5030607@oracle.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt354.oracle.com [141.146.40.154] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A090202.4C0558FA.01E5:SCFMA4539814,ss=1,fgs=0 User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.8) Gecko/20100329 Lightning/1.0b1 Thunderbird/3.0.3 Status: RO Content-Length: 243 This project was created to as an "automatic approved" case. The Solaris crypto development team has reviewed it and it is not introducing any public interfaces. The updated manpage materials are in the case directory. -Wyllys Ingersoll From huieying.lee@oracle.com Tue Jun 8 14:48:28 2010 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o58LmRfg016815 for ; Tue, 8 Jun 2010 14:48:27 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id o58LmNjZ055309 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 8 Jun 2010 15:48:24 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0L3P00L4FTWN1X00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 08 Jun 2010 14:48:23 -0700 (PDT) Received: from sca-ea-mail-2.sun.com ([192.18.43.25]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0L3P00KY9TWMZSA0@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 08 Jun 2010 14:48:23 -0700 (PDT) Received: from acsinet15.oracle.com (acsinet15.oracle.com [141.146.126.227]) by sca-ea-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id o58LmH8s013989; Tue, 08 Jun 2010 21:48:17 +0000 (GMT) Received: from acsmt355.oracle.com (acsmt355.oracle.com [141.146.40.155]) by acsinet15.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id o58AMOEs008844; Tue, 08 Jun 2010 21:48:10 +0000 (GMT) Received: from abhmt017.oracle.com by acsmt353.oracle.com with ESMTP id 307944691276033621; Tue, 08 Jun 2010 14:47:01 -0700 Received: from [129.146.108.12] (/129.146.108.12) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 08 Jun 2010 14:47:01 -0700 Date: Tue, 08 Jun 2010 14:39:21 -0700 From: Huie-Ying Lee Subject: Re: OpenSSL devcrypto engine support [PSARC/2010/199 Self Review] In-reply-to: <201006011857.o51IvNAG020411@sac.sfbay.sun.com> To: PSARC-ext@sun.com Cc: Wyllys Ingersoll , crypto-discuss@opensolaris.org Message-id: <4C0EB889.303@oracle.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Source-IP: acsmt355.oracle.com [141.146.40.155] X-Auth-Type: Internal IP X-CT-RefId: str=0001.0A0B0201.4C0EBA9B.0065:SCFMA4539814,ss=1,fgs=0 References: <201006011857.o51IvNAG020411@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.22 (X11/20090803) Status: RO Content-Length: 2546 There is a minor change to the location of the libdevcrypto library for this case. We have decided to move it from /usr/lib/engines to /lib/openssl/engines, so that the new library will be located under the /lib/openssl directory, along with the existing private binaries of OpenSSL. The spec file and the openssl(5) man page has been updated and placed in the case directory. Thanks, Huie-Ying Wyllys Ingersoll wrote: > Template Version: @(#)sac_nextcase 1.70 03/30/10 SMI > This information is Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved. > 1. Introduction > 1.1. Project/Component Working Name: > OpenSSL devcrypto engine support > 1.2. Name of Document Author/Supplier: > Author: HuieYing Lee > 1.3 Date of This Document: > 01 June, 2010 > 4. Technical Description > Template Version: @(#)sac_nextcase 1.70 03/30/10 SMI > This information is Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved. > 1. Introduction > > 1.1. Project/Component Working Name: > OpenSSL devcrypto engine support > > 1.2. Name of Document Author/Supplier: > Author: Huie-Ying Lee > > 1.3 Date of This Document: > June 01, 2010 > > 4. Technical Description > > This enhancement is to add a new "devcrypto" engine to OpenSSL. > The devcrypto engine will access the cryptographic hardware providers > directly through the private ioctl interface from the Solaris > Cryptographic Framework, bypassing libpkcs11 and pkcs11_kernel libraries. > This scheme has been blessed by Solaris Cryptographic Framework team. > > This engine will be implemented as a seperate shared library, and it can > be used only by an OpenSSL application through the OpenSSL dynamic engine > support. > > To support this new devcrypto engine, we also need to enable the dynamic > engine support in OpenSSL, which has never been enabled in Solaris before. > > pkg:/system/library > /usr/lib/engines/libdevcrypto.so Private > /usr/lib/engines/64/libdevcrypto.so Private > > The release binding for this change is micro. > > 6. Resources and Schedule > 6.4. Steering Committee requested information > 6.4.1. Consolidation C-team Name: > ON > 6.5. ARC review type: Automatic > 6.6. ARC Exposure: open > > > 6. Resources and Schedule > 6.4. Steering Committee requested information > 6.4.1. Consolidation C-team Name: > ON > 6.5. ARC review type: Automatic > 6.6. ARC Exposure: open > >