OBSOLETE Patch-ID# 113451-05
Keywords: security ike rfe ssh inet ikecert footprint ipv6
Synopsis: Obsoleted by: 113451-06 SunOS 5.9: IKE Patch
Date: Jan/21/2004


Install Requirements: Reconfigure immediately after patch is installed                      
                      
Solaris Release: 9

SunOS Release: 5.9

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 114435

Topic: SunOS 5.9: IKE Patch

Relevant Architectures: sparc

BugId's fixed with this patch: 4508547 4628774 4628901 4653051 4666686 4671563 4673333 4673338 4687237 4704460 4731575 4739746 4741543 4742619 4745493 4745709 4752466 4823665 4832562 4842368 4930399

Changes incorporated in this version: 4930399

Patches accumulated and obsoleted by this patch: 115260-01

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/etc/security/exec_attr
/usr/lib/abi/abi_libike.so.1
/usr/lib/abi/abi_libikecert.so.1 (deleted)
/usr/lib/inet/certdb
/usr/lib/inet/certlocal
/usr/lib/inet/certrldb
/usr/lib/inet/in.iked
/usr/lib/libike.so.1
/usr/sbin/ikeadm
/usr/sbin/ikecert

Problem Description:

4930399 ASN.1 patches from SSH, Inc.
 
(from 113451-04)
 
        This patch revision was generated to accumulate and obsolete
        the changes introduced in Solaris Update s9u5 feature point
        patch  115260-01
 
(from 113451-03)
 
4673333 IKE should support hardware assist for certs and Oakley groups
4666686 Patch libike with 4/8/2002 SSH patches
4687237 ssh_fatal() calls abort()
4704460 ikeadm:  strcpy() should be replaced by strlcpy()
4739746 single-buffer memory leak in start_ike_servers()
4745493 More patches from SSH Inc.
4745709 SSH IKE code leaks hostent structures
 
(from 113451-02)
 
4628774 Upgrade SSH IKE library to 4.2 from 2.1
4653051 ikecert certlocal -kc ... fails without an altname (-A option)
4508547 ikeadm errors are vague
4628901 in.iked should be compiled with _REENTRANT defined
4741543 The patch 113451-01 doesn't replace the abi_libikecert.so.1 properly
 
(from 113451-01)
 
4628774 Upgrade SSH IKE library to 4.2 from 2.1
4653051 ikecert certlocal -kc ... fails without an altname (-A option)
4508547 ikeadm errors are vague
4628901 in.iked should be compiled with _REENTRANT defined
 
 
(from 115260-01)
 
4671563 RFE: ikecert -lv should list algorithm signature
4673338 IKE should support HW storage of private keys and certificates
4731575 IKE should work with IPv6
4742619 HW-IKE should be more robust when choosing pkcs11 slots
4752466 Race in in.iked causes coredump in add_new_sa().
4823665 in.iked becomes confused about sender and receiver
4832562 *certdb* malformed cert causes core dump in p
4842368 Memory leak for rsa_encryption initiator

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
NOTE1:   To get the complete Hardware Acceleration for IKE
        feature, please install patch:
 
        114125-01 (or newer) config.sample
 
NOTE2:  To get the complete Hardware Key Storage for IKE and
        Ike for IPV6 feature, please install the following patches:
 
        112904-10 (or newer) ipsecah patch

README -- Last modified date:  Thursday, January 22, 2004

