2017-10-20 11:39:21 |
bugproxy |
bug |
|
|
added bug |
2017-10-20 11:39:24 |
bugproxy |
tags |
|
architecture-s39064 bugnameltc-160151 severity-high targetmilestone-inin1710 |
|
2017-10-20 11:39:25 |
bugproxy |
ubuntu: assignee |
|
Skipper Bug Screeners (skipper-screen-team) |
|
2017-10-20 11:39:29 |
bugproxy |
affects |
ubuntu |
opencryptoki (Ubuntu) |
|
2017-10-20 11:43:24 |
Frank Heimes |
bug task added |
|
ubuntu-z-systems |
|
2017-10-20 11:43:38 |
Frank Heimes |
ubuntu-z-systems: importance |
Undecided |
High |
|
2017-10-20 11:45:55 |
Frank Heimes |
ubuntu-z-systems: assignee |
|
Dimitri John Ledkov (xnox) |
|
2017-10-20 11:55:59 |
Frank Heimes |
opencryptoki (Ubuntu): status |
New |
Confirmed |
|
2017-10-20 11:56:02 |
Frank Heimes |
ubuntu-z-systems: status |
New |
Confirmed |
|
2017-10-20 12:09:06 |
Dimitri John Ledkov |
tags |
architecture-s39064 bugnameltc-160151 severity-high targetmilestone-inin1710 |
architecture-s39064 bugnameltc-160151 regression-release severity-high targetmilestone-inin1710 |
|
2017-10-20 12:09:10 |
Dimitri John Ledkov |
tags |
architecture-s39064 bugnameltc-160151 regression-release severity-high targetmilestone-inin1710 |
architecture-s39064 artful bugnameltc-160151 regression-release severity-high targetmilestone-inin1710 |
|
2017-10-23 08:38:58 |
Frank Heimes |
attachment added |
|
strace.txt https://bugs.launchpad.net/ubuntu/+source/opencryptoki/+bug/1725250/+attachment/4987496/+files/strace.txt |
|
2017-10-27 11:38:32 |
Dimitri John Ledkov |
nominated for series |
|
Ubuntu Bionic |
|
2017-10-27 11:38:32 |
Dimitri John Ledkov |
bug task added |
|
opencryptoki (Ubuntu Bionic) |
|
2017-10-27 11:38:32 |
Dimitri John Ledkov |
nominated for series |
|
Ubuntu Artful |
|
2017-10-27 11:38:32 |
Dimitri John Ledkov |
bug task added |
|
opencryptoki (Ubuntu Artful) |
|
2017-12-14 19:27:29 |
Frank Heimes |
attachment added |
|
pkcsconf_bionic.txt https://bugs.launchpad.net/ubuntu/+source/opencryptoki/+bug/1725250/+attachment/5022748/+files/pkcsconf_bionic.txt |
|
2017-12-15 14:29:51 |
Dimitri John Ledkov |
opencryptoki (Ubuntu Bionic): status |
Confirmed |
Fix Released |
|
2017-12-15 14:37:46 |
Frank Heimes |
ubuntu-z-systems: status |
Confirmed |
In Progress |
|
2017-12-15 15:51:27 |
Dimitri John Ledkov |
opencryptoki (Ubuntu Artful): status |
New |
In Progress |
|
2017-12-15 16:30:29 |
Frank Heimes |
attachment added |
|
pkcsconf_artful_PPA_enabled.txt https://bugs.launchpad.net/ubuntu/+source/opencryptoki/+bug/1725250/+attachment/5023084/+files/pkcsconf_artful_PPA_enabled.txt |
|
2017-12-15 16:35:30 |
Frank Heimes |
attachment added |
|
strace.txt https://bugs.launchpad.net/ubuntu/+source/opencryptoki/+bug/1725250/+attachment/5023086/+files/strace.txt |
|
2018-02-15 19:50:12 |
Francis Ginther |
tags |
architecture-s39064 artful bugnameltc-160151 regression-release severity-high targetmilestone-inin1710 |
architecture-s39064 artful bugnameltc-160151 id-5a7c406f0e36154d1ca6f7e6 regression-release severity-high targetmilestone-inin1710 |
|
2018-03-09 09:49:26 |
bugproxy |
attachment added |
|
strace.txt https://bugs.launchpad.net/bugs/1725250/+attachment/5074088/+files/strace.txt |
|
2018-05-16 13:54:40 |
Frank Heimes |
attachment added |
|
1725250 - pkcsconf issue.txt https://bugs.launchpad.net/ubuntu/+source/opencryptoki/+bug/1725250/+attachment/5140352/+files/1725250%20-%20pkcsconf%20issue.txt |
|
2018-05-16 14:54:26 |
Dimitri John Ledkov |
opencryptoki (Ubuntu): status |
Fix Released |
Confirmed |
|
2018-05-16 14:54:28 |
Dimitri John Ledkov |
opencryptoki (Ubuntu Artful): status |
In Progress |
Confirmed |
|
2018-05-16 14:54:30 |
Dimitri John Ledkov |
opencryptoki (Ubuntu Bionic): status |
Fix Released |
Confirmed |
|
2018-05-16 14:54:33 |
Dimitri John Ledkov |
ubuntu-z-systems: status |
In Progress |
Confirmed |
|
2018-05-17 09:01:35 |
bugproxy |
tags |
architecture-s39064 artful bugnameltc-160151 id-5a7c406f0e36154d1ca6f7e6 regression-release severity-high targetmilestone-inin1710 |
architecture-s39064 artful bugnameltc-160151 id-5a7c406f0e36154d1ca6f7e6 regression-release severity-critical targetmilestone-inin1710 |
|
2018-05-18 09:35:09 |
Dimitri John Ledkov |
nominated for series |
|
Ubuntu Cosmic |
|
2018-05-18 09:35:09 |
Dimitri John Ledkov |
bug task added |
|
opencryptoki (Ubuntu Cosmic) |
|
2018-05-18 09:35:26 |
Dimitri John Ledkov |
opencryptoki (Ubuntu Cosmic): status |
Confirmed |
Fix Released |
|
2018-05-18 09:43:35 |
Dimitri John Ledkov |
description |
Running Ubuntu 17.10 on a zVM s390x environment with opencryptoki 3.7 installed via apt, the command pkcsconf -t gives a segmentation fault.
We did some tests (all on a zVM):
1. On a debian testing installation: the opencryptoki 3.7.0+dfsg-4 package works as expected.
2. On a ubuntu 17.04 installation: the opencryptoki (3.6.2+dfsg-1 that is available on the repo) package works as expected.
3. On a ubuntu 17.10 installation: opencryptoki 3.7.0+dfsg-4 gives segmentation fault (pkcsconf -t)
4. On a ubuntu 17.10 installation: downloading building opencryptoki 3.7.0 from Github manually and installing it, works as expected.
5. On a ubuntu 17.10 installation: installing opencryptoki 3.7.0+dfsg-4 package from debian testing repository, work as expected.
It seems that opencryptoki 3.7.0+dfsg-4 package from Ubuntu was built differently compared to Debian. We believe that the build was done incorrectly and is causing the pkcsconf -t command to segfault.
Could you guys verify how the package is being built and compare it to debian's opencryptoki package?
Machine Type = zVM s390x
---Steps to Reproduce---
#apt-get install opencryptoki
#pkcsconf -t
Segmentation fault
---Patches Installed---
na
---uname output---
Linux 4.13.0-16-generic #19-Ubuntu SMP Wed Oct 11 18:33:05 UTC 2017 s390x s390x s390x GNU/Linux
---Debugger---
A debugger is not configured
Userspace tool common name: opencryptoki
Userspace rpm: opencryptoki_3.7.0+dfsg-4
The userspace tool has the following bit modes: 64-bit
Userspace tool obtained from project website: na
-Attach ltrace and strace of userspace application. |
[Impact]
* Impossible to use multiple different token types in opencryptoki.
[Test Case]
* Ensure one has a system with multiple tokens configured. E.g. s390x with ICA and SoftTok.
* Execute $ pkcsconf -t
* The model for two tokens should be different e.g.:
$ pkcsconf -t | grep Model
Model: IBM ICA
Model: IBM SoftTok
On broken systems, whichever token is loaded first is repeated for all subsequent tokens.
[Regression Potential]
* No code changes are done. It appears that the code relies on dynamically loading and rebinding functions, yet that is not possible to do with distribution default linker flag -Wl,-Bsymbolic-functions. Recompiling the software with this flag stripped makes the software operate as expected.
[Other Info]
* The fix for this issue is similar to what has been employed previously. E.g. in https://bugs.launchpad.net/ubuntu/+source/xfe/+bug/644645
[Original Bug report]
Running Ubuntu 17.10 on a zVM s390x environment with opencryptoki 3.7 installed via apt, the command pkcsconf -t gives a segmentation fault.
We did some tests (all on a zVM):
1. On a debian testing installation: the opencryptoki 3.7.0+dfsg-4 package works as expected.
2. On a ubuntu 17.04 installation: the opencryptoki (3.6.2+dfsg-1 that is available on the repo) package works as expected.
3. On a ubuntu 17.10 installation: opencryptoki 3.7.0+dfsg-4 gives segmentation fault (pkcsconf -t)
4. On a ubuntu 17.10 installation: downloading building opencryptoki 3.7.0 from Github manually and installing it, works as expected.
5. On a ubuntu 17.10 installation: installing opencryptoki 3.7.0+dfsg-4 package from debian testing repository, work as expected.
It seems that opencryptoki 3.7.0+dfsg-4 package from Ubuntu was built differently compared to Debian. We believe that the build was done incorrectly and is causing the pkcsconf -t command to segfault.
Could you guys verify how the package is being built and compare it to debian's opencryptoki package?
Machine Type = zVM s390x
---Steps to Reproduce---
#apt-get install opencryptoki
#pkcsconf -t
Segmentation fault
---Patches Installed---
na
---uname output---
Linux 4.13.0-16-generic #19-Ubuntu SMP Wed Oct 11 18:33:05 UTC 2017 s390x s390x s390x GNU/Linux
---Debugger---
A debugger is not configured
Userspace tool common name: opencryptoki
Userspace rpm: opencryptoki_3.7.0+dfsg-4
The userspace tool has the following bit modes: 64-bit
Userspace tool obtained from project website: na
-Attach ltrace and strace of userspace application. |
|
2018-05-25 12:13:10 |
Dimitri John Ledkov |
opencryptoki (Ubuntu Bionic): status |
Confirmed |
In Progress |
|
2018-05-25 12:16:25 |
Dimitri John Ledkov |
opencryptoki (Ubuntu Artful): status |
Confirmed |
In Progress |
|
2018-05-28 05:50:17 |
Frank Heimes |
ubuntu-z-systems: status |
Confirmed |
In Progress |
|
2018-05-30 00:36:09 |
Chris Halse Rogers |
opencryptoki (Ubuntu Bionic): status |
In Progress |
Fix Committed |
|
2018-06-07 22:22:34 |
Adam Conrad |
opencryptoki (Ubuntu Artful): status |
In Progress |
Fix Committed |
|
2018-06-07 22:22:37 |
Adam Conrad |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
2018-06-07 22:22:40 |
Adam Conrad |
bug |
|
|
added subscriber SRU Verification |
2018-06-07 22:22:44 |
Adam Conrad |
tags |
architecture-s39064 artful bugnameltc-160151 id-5a7c406f0e36154d1ca6f7e6 regression-release severity-critical targetmilestone-inin1710 |
architecture-s39064 artful bugnameltc-160151 id-5a7c406f0e36154d1ca6f7e6 regression-release severity-critical targetmilestone-inin1710 verification-needed verification-needed-artful |
|
2018-06-07 22:23:10 |
Adam Conrad |
tags |
architecture-s39064 artful bugnameltc-160151 id-5a7c406f0e36154d1ca6f7e6 regression-release severity-critical targetmilestone-inin1710 verification-needed verification-needed-artful |
architecture-s39064 artful bugnameltc-160151 id-5a7c406f0e36154d1ca6f7e6 regression-release severity-critical targetmilestone-inin1710 verification-needed verification-needed-artful verification-needed-bionic |
|
2018-06-08 04:40:52 |
Frank Heimes |
tags |
architecture-s39064 artful bugnameltc-160151 id-5a7c406f0e36154d1ca6f7e6 regression-release severity-critical targetmilestone-inin1710 verification-needed verification-needed-artful verification-needed-bionic |
architecture-s39064 artful bugnameltc-160151 id-5a7c406f0e36154d1ca6f7e6 regression-release severity-critical targetmilestone-inin1710 verification-done verification-done-artful verification-done-bionic |
|
2018-06-08 04:41:32 |
Frank Heimes |
attachment added |
|
SRU validation.txt https://bugs.launchpad.net/ubuntu/+source/opencryptoki/+bug/1725250/+attachment/5150095/+files/SRU%20validation.txt |
|
2018-06-08 04:41:42 |
Frank Heimes |
ubuntu-z-systems: status |
In Progress |
Fix Committed |
|
2018-06-11 07:41:33 |
Łukasz Zemczak |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
2018-06-11 07:45:31 |
Launchpad Janitor |
opencryptoki (Ubuntu Artful): status |
Fix Committed |
Fix Released |
|
2018-06-11 07:52:14 |
Launchpad Janitor |
opencryptoki (Ubuntu Bionic): status |
Fix Committed |
Fix Released |
|
2018-06-11 07:58:48 |
Frank Heimes |
ubuntu-z-systems: status |
Fix Committed |
Fix Released |
|