author | Rich Burridge <rich.burridge@oracle.com> |
Thu, 29 Oct 2015 11:05:40 -0700 | |
changeset 5029 | 77413b29eb5a |
parent 4822 | components/openssl/openssl-default/files/openssl.5@1fb8a14c6702 |
child 6019 | bd2dbcf829c2 |
permissions | -rw-r--r-- |
2008
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
1 |
'\" te |
4373
6d5db1ada4a5
PSARC/2015/249 EOL of OpenSSL SSLv2/v3 support
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
2008
diff
changeset
|
2 |
.\" Copyright (c) 2009, 2015, Oracle and/or its affiliates. All rights reserved. |
5029
77413b29eb5a
22107485 More Userland component man page normalizations
Rich Burridge <rich.burridge@oracle.com>
parents:
4822
diff
changeset
|
3 |
.TH openssl 7 "28 Oct 2015" "SunOS 5.12" "Standards, Environments, and Macros" |
2008
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
4 |
.SH NAME |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
5 |
openssl \- OpenSSL cryptographic and Secure Sockets Layer toolkit |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
6 |
.SH DESCRIPTION |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
7 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
8 |
.LP |
4373
6d5db1ada4a5
PSARC/2015/249 EOL of OpenSSL SSLv2/v3 support
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
2008
diff
changeset
|
9 |
OpenSSL is a cryptography toolkit that implements the Transport Layer Security (TLS v1) network protocols. This version of OpenSSL no longer supports the Secure Sockets Layer (SSLv2/v3) network protocols. |
2008
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
10 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
11 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
12 |
The following features are omitted from the binaries for issues including but not limited to patents, trademark, and US export restrictions: ECC, IDEA, MDC2, RC3, RC5, 4758_CCA Engine, AEP Engine, Atalla Engine, CHIL Engine, CSWIFT Engine, GMP Engine, NURON Engine, PadLock Engine, Sureware Engine, and UBSEC Engine. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
13 |
.SS "The Dynamic Engine Support" |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
14 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
15 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
16 |
The dynamic engine support has been enabled, which allows an external engine, in the form of a shared library, to be dynamically bound and used by an OpenSSL-based application. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
17 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
18 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
19 |
Run the following command to see if the dynamic engine is supported: |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
20 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
21 |
.in +2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
22 |
.nf |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
23 |
$ \fBopenssl engine dynamic\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
24 |
(dynamic) Dynamic engine loading support |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
25 |
.fi |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
26 |
.in -2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
27 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
28 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
29 |
.SS "The PKCS#11 Engine" |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
30 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
31 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
32 |
The PKCS#11 engine has been included with ENGINE name \fBpkcs11\fR. The engine was developed in Sun and is not integrated in the OpenSSL project. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
33 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
34 |
.LP |
5029
77413b29eb5a
22107485 More Userland component man page normalizations
Rich Burridge <rich.burridge@oracle.com>
parents:
4822
diff
changeset
|
35 |
The PKCS#11 engine is a dynamic engine, and it is configured to use the Oracle Solaris Cryptographic Framework. See \fBcryptoadm\fR(8) for configuration information. |
2008
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
36 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
37 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
38 |
The PKCS#11 engine can support the following set of mechanisms: \fBCKM_AES_CBC\fR, \fBCKM_AES_ECB\fR, \fBCKM_BLOWFISH_CBC\fR, \fBCKM_DES_CBC\fR, \fBCKM_DES_ECB\fR, \fBCKM_DES3_CBC\fR, \fBCKM_DES3_ECB\fR, \fBCKM_DSA\fR, \fBCKM_MD5\fR, \fBCKM_RC4\fR, \fBCKM_RSA_PKCS\fR, \fBCKM_RSA_X_509\fR, \fBCKM_SHA_1\fR, \fBCKM_SHA224\fR, \fBCKM_SHA256\fR, \fBCKM_SHA384\fR, \fBCKM_SHA512\fR, \fBCKM_SHA224_HMAC\fR, \fBCKM_SHA224_HMAC_GENERAL\fR, and \fBCKM_SHA224_KEY_DERIVATION\fR. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
39 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
40 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
41 |
The set of mechanisms available depends on installed Crypto Framework providers. To see what mechanisms can be offloaded to the Cryptographic Framework through the PKCS#11 engine on a given machine, run the following command: |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
42 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
43 |
.in +2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
44 |
.nf |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
45 |
$ \fB/usr/bin/openssl engine dynamic -pre SO_PATH:/lib/openssl/engines/64/libpk11.so -pre LOAD -t -c\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
46 |
.fi |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
47 |
.in -2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
48 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
49 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
50 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
51 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
52 |
In order to verify the use of the PKCS#11 engine and the use of hardware acceleration with the OpenSSL application, you must specify the EVP option. EVP stands for \fBEnVeloPE\fR API, which is the API applications such as Apache use to access OpenSSL cryptography. Use the EVP option to get the most accurate \fBopenssl speed\fR results. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
53 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
54 |
.in +2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
55 |
.nf |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
56 |
$ \fB/usr/bin/openssl speed -evp aes-128-cbc -engine pkcs11\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
57 |
.fi |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
58 |
.in -2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
59 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
60 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
61 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
62 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
63 |
Due to requirements of the PKCS#11 standard regarding \fBfork\fR(2) behavior, some applications that use the OpenSSL EVP interfaces and \fBfork()\fR with active \fBcrypto\fR contexts might experience unexpected behavior. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
64 |
.SS "Using FIPS Mode" |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
65 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
66 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
67 |
FIPS-140 capable OpenSSL is available in Oracle Solaris. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
68 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
69 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
70 |
The IPS package mediator feature is used to activate the non-FIPS-140 version or the FIPS-140 version of OpenSSL. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
71 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
72 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
73 |
By default, the non-FIPS-140 version (\fBdefault\fR implementation) is activated. Use the \fBpkg set-mediator\fR command to switch to the FIPS-140 version of OpenSSL: |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
74 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
75 |
.in +2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
76 |
.nf |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
77 |
# \fBpkg set-mediator -I fips-140 openssl\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
78 |
.fi |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
79 |
.in -2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
80 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
81 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
82 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
83 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
84 |
To switch back to the default non-FIPS-140 version, use the following command: |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
85 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
86 |
.in +2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
87 |
.nf |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
88 |
# \fBpkg set-mediator -I default openssl\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
89 |
.fi |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
90 |
.in -2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
91 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
92 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
93 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
94 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
95 |
Reboot is required to enforce the change system-wide. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
96 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
97 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
98 |
See \fIManaging Encryption and Certificates in Oracle Solaris 11.2\fR for more details. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
99 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
100 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
101 |
When the FIPS-140 version of OpenSSL is activated, an application can run in FIPS-140 mode or non-FIPS-140 mode. An application must explicitly call \fBFIPS_mode_set()\fR in order to activate FIPS-140 mode. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
102 |
.SS "Building an OpenSSL Application" |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
103 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
104 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
105 |
To build an OpenSSL application, use the following \fBcc\fR command line options: |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
106 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
107 |
.in +2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
108 |
.nf |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
109 |
cc [ \fIflag\fR... ] \fIfile\fR... -lcrypto -lssl [ \fIlibrary\fR... ] |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
110 |
.fi |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
111 |
.in -2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
112 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
113 |
.SS "Accessing RSA Keys in PKCS#11 Keystores" |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
114 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
115 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
116 |
OpenSSL can access RSA keys in PKCS#11 keystores using the following functions of the ENGINE API: |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
117 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
118 |
.in +2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
119 |
.nf |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
120 |
EVP_PKEY *ENGINE_load_private_key(ENGINE *e, |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
121 |
const char *key_id, UI_METHOD *ui_method, |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
122 |
void *callback_data) |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
123 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
124 |
EVP_PKEY *ENGINE_load_public_key(ENGINE *e, |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
125 |
const char *key_id, UI_METHOD *ui_method, |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
126 |
void *callback_data) |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
127 |
.fi |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
128 |
.in -2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
129 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
130 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
131 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
132 |
\fBkey_id\fR, formerly for filenames only, can be now also set to a \fBPKCS#11 URI\fR. The \fBEVP_PKEY\fR structure is newly allocated and caller is responsible to free the structure later. To avoid clashes with existing filenames, \fBfile://\fR prefix for filenames is now also accepted but only when the PKCS#11 engine is in use. The PKCS#11 URI specification follows: |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
133 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
134 |
.in +2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
135 |
.nf |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
136 |
pkcs11:[token=<label>][:manuf=<label>][;serial=<label>] |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
137 |
[;model=<label>][;object=<label>] |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
138 |
[;objecttype=(public|private|cert)] |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
139 |
[;passphrasedialog=(builtin|exec:<file>)] |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
140 |
.fi |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
141 |
.in -2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
142 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
143 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
144 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
145 |
The ordering of keywords is not significant. The PKCS#11 engine uses the keystore for the slot chosen for public key operations, which is \fBmetaslot\fR on a standard configured machine. Currently, the PKCS#11 engine ignores the \fBobjecttype\fR keyword. The only mandatory keyword is \fBobject\fR which is the key object label. For information on how to use a different, possibly hardware, keystore with \fBmetaslot\fR, see \fBlibpkcs11\fR(3LIB). |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
146 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
147 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
148 |
The token PIN is provided by way of the \fBpassphrasedialog\fR keyword and is either read from the terminal (\fBbuiltin\fR) or from the output of an external command (\fBexec:<file>\fR). The PIN is used to log into the token and by default is deleted from the memory then. The keyword \fBpin\fR is intentionally not provided due to inherent security problems of possible use of a password in the process arguments. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
149 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
150 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
151 |
Due to fork safety issues the application must re-login if the child continues to use the PKCS#11 engine. It is done inside of the engine automatically if fork is detected and in that case, \fBexec:<file>\fR option of the \fBpassphrasedialog\fR keyword can be used. Alternatively, an environment variable \fBOPENSSL_PKCS11_PIN_CACHING_POLICY\fR can be used to allow the PIN to be cached in memory and reused in the child. It can be set to \fBnone\fR which is the default, \fBmemory\fR to store the PIN in memory, and \fBmlocked-memory\fR to keep the PIN in a locked page using \fBmlock\fR(3C). \fBPRIV_PROC_LOCK_MEMORY\fR privilege is required in that case. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
152 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
153 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
154 |
Sensitive parts of private keys are never read from the token to the process memory no matter whether the key is tagged with sensitive flag or not. The PKCS#11 engine uses the public components as a search key to get a PKCS#11 object handle to the private key. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
155 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
156 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
157 |
To use the RSA keys by reference, high level API functions such as \fBRSA_public_decrypt()\fR, \fBEVP_PKEY_set1_RSA()\fR, or \fBEVP_SignInit()\fR must be used. Low level functions might go around the engine and fail to make use of the feature. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
158 |
.SS "Additional Documentation" |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
159 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
160 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
161 |
Extensive additional documentation for OpenSSL modules is available in the \fB/usr/share/man/man1openssl\fR, \fB/usr/share/man/man3openssl\fR, \fB/usr/share/man/man5openssl\fR, and \fB/usr/share/man/man7openssl\fR directories. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
162 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
163 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
164 |
To view the license terms, attribution, and copyright for OpenSSL, run \fBpkg info --license library/security/openssl\fR. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
165 |
.SH EXAMPLES |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
166 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
167 |
\fBExample 1 \fRGenerating and Printing a Public Key |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
168 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
169 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
170 |
The following example generates and prints a public key stored in an already initialized PKCS#11 keystore. Notice the use of \fB-engine pkcs11\fR and \fB-inform e\fR. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
171 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
172 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
173 |
.in +2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
174 |
.nf |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
175 |
$ \fBpktool gencert keystore=pkcs11 label=mykey \ |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
176 |
subject="CN=test" keytype=rsa keylen=1024 serial=01\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
177 |
$ \fBopenssl rsa -in "pkcs11:object=mykey;passphrasedialog=builtin"\ |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
178 |
-pubout -text -engine pkcs11 -inform e\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
179 |
.fi |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
180 |
.in -2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
181 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
182 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
183 |
.SH ATTRIBUTES |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
184 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
185 |
.LP |
5029
77413b29eb5a
22107485 More Userland component man page normalizations
Rich Burridge <rich.burridge@oracle.com>
parents:
4822
diff
changeset
|
186 |
See \fBattributes\fR(7) for a description of the following attributes: |
2008
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
187 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
188 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
189 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
190 |
.TS |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
191 |
tab() box; |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
192 |
cw(2.75i) |cw(2.75i) |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
193 |
lw(2.75i) |lw(2.75i) |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
194 |
. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
195 |
ATTRIBUTE TYPEATTRIBUTE VALUE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
196 |
_ |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
197 |
Availabilitylibrary/security/openssl |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
198 |
_ |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
199 |
Interface StabilityVolatile |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
200 |
.TE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
201 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
202 |
.SH SEE ALSO |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
203 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
204 |
.LP |
5029
77413b29eb5a
22107485 More Userland component man page normalizations
Rich Burridge <rich.burridge@oracle.com>
parents:
4822
diff
changeset
|
205 |
\fBcrle\fR(1), \fBcryptoadm\fR(8), \fBlibpkcs11\fR(3LIB), \fBattributes\fR(7), \fBprivileges\fR(7) |
2008
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
206 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
207 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
208 |
\fB/usr/share/man/man1openssl/openssl.1openssl\fR, \fB/usr/share/man/man1openssl/CRYPTO_num_locks.3openssl\fR, \fB/usr/share/man/man3openssl/engine.3\fR, \fB/usr/share/man/man3openssl/evp.3\fR |