1crypto_certs(4)                  File Formats                  crypto_certs(4)
2
3
4

NAME

6       crypto_certs  -  directory  for  certificate  files for Solaris Crypto‐
7       graphic Framework
8

SYNOPSIS

10       /etc/crypto/certs/CA
11
12
13       /etc/crypto/certs/SUNWobjectCA
14
15
16       /etc/crypto/certs/*
17
18

DESCRIPTION

20       The /etc/crypto/certs directory contains ASN.1 BER or PEM encoded  cer‐
21       tificate files for use by the Solaris Cryptographic Framework.
22
23
24       A  default installation contains root anchors and signing certificates.
25       The CA and SUNWobjectCA certificates are  the  trust  anchors  for  all
26       other certificates. Other certificates contain the certificates used to
27       sign and verify the Solaris user and kernel cryptographic plug-ins
28
29
30       Additional signing certificates may be installed by third-party crypto‐
31       graphic providers. They should either be copied to /etc/crypto/certs or
32       included in the package that delivers the provider.
33
34
35       Only certificates that are issued by the CA  or  SUNWobjectCA  certifi‐
36       cates  and  include the organization unit "Solaris Cryptographic Frame‐
37       work" in their subject distinguished names are accepted by the  Solaris
38       Cryptographic  Framework. This restriction is in place due to US Export
39       Law on the export of open cryptographic interfaces at the time of ship‐
40       ping this revision of the product.
41

ATTRIBUTES

43       See attributes(5) for descriptions of the following attributes:
44
45
46
47
48       ┌─────────────────────────────┬─────────────────────────────┐
49       │      ATTRIBUTE TYPE         │      ATTRIBUTE VALUE        │
50       ├─────────────────────────────┼─────────────────────────────┤
51       │Availability                 │SUNWcsr                      │
52       ├─────────────────────────────┼─────────────────────────────┤
53       │Interface Stability          │Evolving                     │
54       └─────────────────────────────┴─────────────────────────────┘
55

SEE ALSO

57       elfsign(1), libpkcs11(3LIB), attributes(5)
58
59
60
61SunOS 5.11                        23 Feb 2007                  crypto_certs(4)
Impressum