OpenSolaris

Printable Version Enter a New Search
Bug ID 6654910
Synopsis kmf_validate_cert() won't get over non-existent x509v3 extensions in TA
State 10-Fix Delivered (Fix available in build)
Category:Subcategory solaris-crypto:key_mgmt_libraries
Keywords
Responsible Engineer Wyllys Ingersoll
Reported Against
Duplicate Of
Introduced In solaris_nevada
Commit to Fix snv_85
Fixed In snv_85
Release Fixed solaris_nevada(snv_85)
Related Bugs
Submit Date 24-January-2008
Last Update Date 12-March-2008
Description 
kmf_validate_cert() calls check_key_usage() which always returns KMF_ERR_EXTENSION_NOT_FOUND when no extensions are found. However, according to default policy settings, this should not cause kmf_validate_cert() to fail, in case that there is no KU extension, for example.
Work Around 
N/A
Comments 
N/A