J. Duke | 319a3b9 | 2007-12-01 00:00:00 +0000 | [diff] [blame^] | 1 | # |
| 2 | # Configuration file to allow the SunPKCS11 provider to utilize |
| 3 | # the Solaris Cryptographic Framework, if it is available |
| 4 | # |
| 5 | |
| 6 | name = Solaris |
| 7 | |
| 8 | description = SunPKCS11 accessing Solaris Cryptographic Framework |
| 9 | |
| 10 | library = /usr/lib/$ISA/libpkcs11.so |
| 11 | |
| 12 | handleStartupErrors = ignoreAll |
| 13 | |
| 14 | attributes = compatibility |
| 15 | |
| 16 | disabledMechanisms = { |
| 17 | CKM_MD2 |
| 18 | CKM_MD5 |
| 19 | CKM_SHA_1 |
| 20 | CKM_SHA256 |
| 21 | CKM_SHA384 |
| 22 | CKM_SHA512 |
| 23 | CKM_DSA_KEY_PAIR_GEN |
| 24 | # KEY_AND_MAC_DERIVE disabled due to Solaris bug 6306708 |
| 25 | CKM_SSL3_KEY_AND_MAC_DERIVE |
| 26 | CKM_TLS_KEY_AND_MAC_DERIVE |
| 27 | # the following mechanisms are disabled due to performance issues (Solaris bug 6337157) |
| 28 | CKM_DSA_SHA1 |
| 29 | CKM_MD5_RSA_PKCS |
| 30 | CKM_SHA1_RSA_PKCS |
| 31 | CKM_SHA256_RSA_PKCS |
| 32 | CKM_SHA384_RSA_PKCS |
| 33 | CKM_SHA512_RSA_PKCS |
| 34 | } |
| 35 | |