Sun Crypto Accelerator 1000 Driver Updates

Requirements:

• Solaris 8 Operating System (7/01 and subsequent versions within Solaris 8)
• SunONE Web Server software versions 4.1 SP9 or 6.0 SP1 or the Apache 1.3.12 Web server software

Platform Support:

• Netra T1 AC200/DC200, Netra 20, Netra t 1400/1405, Netra t 1120/1125
• Sun Enterprise 250, Sun Enterprise 220R, Sun Enterprise 420R, Sun Enterprise 450
• Sun Fire 280R, Sun Fire V880, Sun Fire 4800, Sun Fire 4810, Sun Fire 6800
• Sun Blade 1000, Ultra 60, and Ultra 80

New Patches:

• Patch 113355-06 OpenSSL 0.9.7c support

• Patch 115297-02 Security Fix for OpenSSL

  This patch fixes a security flaw in OpenSSL. For a full fix to this problem, you must also update Apache by installing Patch 113146-01 or later. This patch contains the core driver and libraries for Sun Crypto Accelerator 1000 Board Version 1.1. In addition, you must also install the optional components Patch 113355-02 or later to apply all of the feature enhancements.

• Patch 114790-01 NCAS Support

  This patch enables support for Solaris 9 NCAS implementation and enables an SSL acceleration performance enhancement of up to 300% for RSA encryption.

  IMPORTANT NOTE: This patch is currently supported on Solaris 9 4/03. The Sun Fire V210 and V240 servers are supported by the Sun Crypto Accelerator 500 board only, and the Sun Fire V480 server is supported by the Sun Crypto Accelerator board.

  This patch supports SSL3 and SSL2 with SSL3 upgrade only. To use the performance enhancement features, you must install this patch after a Sun OS installation.

  There are potential future Solaris patches and update releases which will overwrite the binaries installed from this special NCAS patch. Please take a look at this patch README file at http://sunsolve.sun.com for more information.

• Patch 113355-03 OpenSSL 0.9.6j and mod_ssl 2.8.14 for Apache 1.3.27, Solaris 9 only

  This patch upgrades OpenSSL from version 0.9.6g, provided for the Sun Crypto Accelerator 1000 driver 1.1, to OpenSSL 0.9.6j.

  This patch is issued to address a security flaw in OpenSSL. To get a full fix for this problem, you must also update Apache by applying Patch 113146-01 or later.

  This patch provides enhancements and fixes to optional components of the Sun Crypto Accelerator 1000.

  Notes for the installation of this patch:

  The installation steps are similar to other Sun patches. In addition, for Apache servers using mod_ssl, please install this patch (including openssl 0.9.6j), then re-run sslconfig. There is no need to generate a new certificate for the server. Simply re-run it, specify the binary and configuration directories, and the sslconfig script will copy the correct mod_ssl library into the libexec directory.

Drivers, Patches, and Updates:

Driver 1.1:

• Sun Crypto Accelerator I000 Driver v. 1.1
• Patch 113355-02 to upgrade OpenSSL to 0.9.6g which also supports Apache 1.3.26

Driver 1.0:

• Patch 112438-01 for /kernel/drv/random
• Patch 112869-02 to upgrade OpenSSL support to 0.9.6e which supports Apache 1.3.26