1#
2# Configuration file to allow the SunPKCS11 provider to utilize
3# the Solaris Cryptographic Framework, if it is available
4#
5
6name = Solaris
7
8description = SunPKCS11 accessing Solaris Cryptographic Framework
9
10library = /usr/lib/$ISA/libpkcs11.so
11
12handleStartupErrors = ignoreAll
13
14# Use the X9.63 encoding for EC points (do not wrap in an ASN.1 OctetString).
15useEcX963Encoding = true
16
17attributes = compatibility
18
19disabledMechanisms = {
20  CKM_DSA_KEY_PAIR_GEN
21  SecureRandom
22# the following mechanisms are disabled due to performance issues
23# (Solaris bug 6337157)
24  CKM_DSA_SHA1
25  CKM_MD5_RSA_PKCS
26  CKM_SHA1_RSA_PKCS
27  CKM_SHA256_RSA_PKCS
28  CKM_SHA384_RSA_PKCS
29  CKM_SHA512_RSA_PKCS
30}
31
32