HP UX Security Products and Features Software Migrating to CDSA

Migrating to CDSA 2.0

F Migrating to CDSA 2.0

HP will be tracking and moving to the new emerging CDSA 2.0 OpenGroup standard when it is ratified. Applications using CDSA 1.2 are likely to continue to work when CDSA 2.0 is available, but it is expected that source code changes will be needed to use CDSA 2.0. That is, some CDSA 1.2 APIs will undergo changes in CDSA 2.0. It is not possible to use both CDSA 1.2 and CDSA 2.0 in one binary executable application.

This appendix documents possible 2.0 changes based on information available as of December, 1998. Users and developers should note that there will likely be further changes to the 2.0 specification by The Open Group. Since the changes adopted by them after this release cannot be fully aniticipated or immediately identified in our manpages, users and developers are urged to consult the OpenGroup web site for the latest updates on the CDSA 2.0 API. This is extremely important for you to do, as the changes The Open Group makes may affect your ability to maintain your current 1.2 CDSA application in the future.

The followng 1.2 API may be changed or obsoleted in CDSA 2.0:

ApplyCrlToDb()

CertGroupConstruct()

CertGroupPrune()

CertGroupVerify()

CertRevoke()

CertSign()

CL_CertCreateTemplate()

CL_CertImport()

CL_CertExport()

CL_CertSign()

CSP_AssociatePublicKeyWithPrivateKey()

CSSM_GetInfo()

CSSM_FreeInfo()

CSSM_ModuleInstall()

CSSM_ModuleAttach()

Appendix F 121