1# 2# Configuration file to allow the SunPKCS11 provider to utilize 3# the Solaris Cryptographic Framework, if it is available 4# 5 6name = Solaris 7 8description = SunPKCS11 accessing Solaris Cryptographic Framework 9 10library = /usr/lib/$ISA/libpkcs11.so 11 12handleStartupErrors = ignoreAll 13 14# Use the X9.63 encoding for EC points (do not wrap in an ASN.1 OctetString). 15useEcX963Encoding = true 16 17attributes = compatibility 18 19disabledMechanisms = { 20 CKM_DSA_KEY_PAIR_GEN 21 SecureRandom 22# the following mechanisms are disabled due to performance issues 23# (Solaris bug 6337157) 24 CKM_DSA_SHA1 25 CKM_MD5_RSA_PKCS 26 CKM_SHA1_RSA_PKCS 27 CKM_SHA256_RSA_PKCS 28 CKM_SHA384_RSA_PKCS 29 CKM_SHA512_RSA_PKCS 30} 31 32