Based on code review comments I've received to date, I have included all of pkcs11_softtoken's symbols in libkcfd's mapfile (as opposed to those that are currently used by libkmf & friends), and moved libkcfd to be under usr/src/lib/pkcs11/libkcfd instead of usr/src/lib/elfsign/libkcfd (which negates the need to move libelfsign, which eliminated the mercurial turds and the need to update many toplevel makefiles).
http://cr.opensolaris.org/~bubbva/fips-cleanup.2/ KMF is unchanged from the last review, and the closed source changes (already sent internally for review) are also unchanged since the last review. Since this is essentially the same code, I am keeping the deadline to review at Monday July 13, COB PT. These changes are consistent with the design, which was reviewed and posted some time ago. While some folks would've rather seen a different approach taken with respect to KMF, I believe that is beyond the scope of this project and certainly outside of my expertise. thank you, Valerie -- Valerie Fenwick, http://blogs.sun.com/bubbva/ @bubbva Solaris Security Technologies, Developer, Sun Microsystems, Inc. 17 Network Circle, Menlo Park, CA, 94025.
