Test & Debug

Test & Debug tools at tips

pkcs11_tracer.so

This is a shim PKCS#11 module that you insert between the application and the PKCS#11 module you are debugging.  It doesn't implement any crypto or object management itself but passes on everything unchanged to the target PKCS#11 library.

It is configured by a set of environment variables that are described in the source code.

The source for pkcs11_tracer.so is held in the ssh://hg.opensolaris.org/hg/crypto/tracer Mercurial repository.

STC2 EF test suite

This is the formal test suite that we use for all of the OpenSolaris cryptographic framework.   It tests everything from the commands, the PKCS#11 libaries, the Kernel APIs.  It has performance and functional tests.

This test suite will always need updating when adding new PKCS#11 mechanisms to any of the providers (including dprov)

Currently this is still closed source but I'm told we should expect it to be opened up fairly soon - engineers from the test team are actively working on it.

dprov(7D)

The dprov kernel module is a fake hardware provider.  It uses the KCF SPI to register as if it was a real hardware provider.   Internally it actually calls back into kcf explicitly requesting the software providers to do the actual implementation.

Nominally it is really part of the STC2 EF suite but it lives in the ON consolidation - partly due to the requirement that it needs the KCF header files to be built (and initially these weren't shipped with Solaris)