Ubuntu
opencryptoki package

  1. Bug #1854148
  2. Activity log

Activity log for bug #1854148

Date Who What changed Old value New value Message
2019-11-27 10:30:03 bugproxy bug added bug
2019-11-27 10:30:06 bugproxy tags architecture-s39064 bugnameltc-182597 severity-high targetmilestone-inin1910
2019-11-27 10:30:08 bugproxy ubuntu: assignee Skipper Bug Screeners (skipper-screen-team)
2019-11-27 10:30:11 bugproxy affects ubuntu opencryptoki (Ubuntu)
2019-11-27 10:37:40 Frank Heimes bug task added ubuntu-z-systems
2019-11-27 10:37:50 Frank Heimes ubuntu-z-systems: status New Triaged
2019-11-27 10:37:58 Frank Heimes ubuntu-z-systems: importance Undecided High
2019-11-27 10:38:34 Frank Heimes ubuntu-z-systems: assignee Skipper Bug Screeners (skipper-screen-team)
2019-11-27 10:38:49 Frank Heimes opencryptoki (Ubuntu): assignee Skipper Bug Screeners (skipper-screen-team) Canonical Foundations Team (canonical-foundations)
2019-11-27 10:41:34 Frank Heimes nominated for series Ubuntu Eoan
2019-11-27 10:41:34 Frank Heimes bug task added opencryptoki (Ubuntu Eoan)
2019-11-27 10:41:34 Frank Heimes nominated for series Ubuntu Xenial
2019-11-27 10:41:34 Frank Heimes bug task added opencryptoki (Ubuntu Xenial)
2019-11-27 10:41:34 Frank Heimes nominated for series Ubuntu Disco
2019-11-27 10:41:34 Frank Heimes bug task added opencryptoki (Ubuntu Disco)
2019-11-27 10:41:34 Frank Heimes nominated for series Ubuntu Bionic
2019-11-27 10:41:34 Frank Heimes bug task added opencryptoki (Ubuntu Bionic)
2019-12-02 11:37:45 Frank Heimes description We just released openCryptoki 3.12.1 to fix a bug in the pkcs11_migrate tool. Change Log: - Fix pkcsep11_migrate tool https://github.com/opencryptoki/opencryptoki https://github.com/opencryptoki/opencryptoki/releases/tag/v3.12.1 Please update the feature request to either.. - include the 3.12.1 bug-fix release .. - .. or include the following commit on top of 3.12: https://github.com/opencryptoki/opencryptoki/commit/316e35e55b1fe90d963186d54e7d8c4f77ce94ed " This fix is applicable to openCryptoki >= 3.4, which means: 20.04 19.10 18.04 16.04 SRU Justification: ------------------ [Impact] * With commit 2668e8f the contents of attribute CKA_IBM_OPAQUE has been changed to contain the raw EP11 blob directly, no longer wrapped into struct ep11_opaque. * The pkcsep11_migrate tool now needs to be corrected in a way that it also expects the raw blob in attribute CKA_IBM_OPAQUE to match what the EP11 token provides. [Fix] * 316e35e55b1fe90d963186d54e7d8c4f77ce94ed "pkcsep11_migrate: Fix re-encryption of EP11 key blobs" [Test Case] * An s390x system (LPAR or z/VM) with at least one crypto domain online and a master key set is needed. * Install the opencryptoki package on that system, which includes the pkcsep11_migrate tool. * Use the pkcsep11_migrate to re-encrypt EP11 token keys in preparation of master keys change in the EP11 adapter. [Regression Potential] * The regression potential can be considered as moderate, since: * this is limited to EP11 token keys migration and re-encryption situations * and the patch modifies the pkcsep11_migrate utility only, hence will not effect other pkcs* tools * and right now the pkcsep11_migrate utility is broken anyway [Other Info] * On top the patch "pkcsep11_migrate: Fix re-encryption of EP11 key blobs" fixes some minor things to make re-encryption really work. __________ We just released openCryptoki 3.12.1 to fix a bug in the pkcs11_migrate tool. Change Log: - Fix pkcsep11_migrate tool https://github.com/opencryptoki/opencryptoki https://github.com/opencryptoki/opencryptoki/releases/tag/v3.12.1 Please update the feature request to either.. - include the 3.12.1 bug-fix release .. - .. or include the following commit on top of 3.12: https://github.com/opencryptoki/opencryptoki/commit/316e35e55b1fe90d963186d54e7d8c4f77ce94ed " This fix is applicable to openCryptoki >= 3.4, which means: 20.04 19.10 18.04 16.04
2020-01-27 07:03:04 Frank Heimes opencryptoki (Ubuntu Disco): status New Won't Fix
2020-02-06 20:47:34 Launchpad Janitor opencryptoki (Ubuntu): status New Fix Released
2020-02-07 08:26:18 Frank Heimes ubuntu-z-systems: status Triaged In Progress
2020-07-17 16:42:06 Frank Heimes opencryptoki (Ubuntu Eoan): status New Won't Fix
2020-09-28 20:24:55 Brian Murray opencryptoki (Ubuntu Bionic): assignee Brian Murray (brian-murray)
2020-09-28 20:24:59 Brian Murray opencryptoki (Ubuntu Bionic): status New In Progress
2020-10-14 15:45:39 Matthieu Clemenceau tags architecture-s39064 bugnameltc-182597 severity-high targetmilestone-inin1910 architecture-s39064 bugnameltc-182597 fr-763 severity-high targetmilestone-inin1910
2020-11-23 21:16:42 Steve Langasek opencryptoki (Ubuntu Bionic): status In Progress Fix Committed
2020-11-23 21:16:46 Steve Langasek bug added subscriber Ubuntu Stable Release Updates Team
2020-11-23 21:16:50 Steve Langasek bug added subscriber SRU Verification
2020-11-23 21:16:54 Steve Langasek tags architecture-s39064 bugnameltc-182597 fr-763 severity-high targetmilestone-inin1910 architecture-s39064 bugnameltc-182597 fr-763 severity-high targetmilestone-inin1910 verification-needed verification-needed-bionic
2020-12-10 13:37:10 Frank Heimes tags architecture-s39064 bugnameltc-182597 fr-763 severity-high targetmilestone-inin1910 verification-needed verification-needed-bionic architecture-s39064 bugnameltc-182597 fr-763 severity-high targetmilestone-inin1910 verification-done verification-done-bionic
2020-12-10 13:39:28 Frank Heimes opencryptoki (Ubuntu Xenial): status New Won't Fix
2020-12-10 13:39:36 Frank Heimes ubuntu-z-systems: status In Progress Fix Committed
2020-12-14 18:57:37 Łukasz Zemczak removed subscriber Ubuntu Stable Release Updates Team
2020-12-14 19:07:41 Launchpad Janitor opencryptoki (Ubuntu Bionic): status Fix Committed Fix Released
2020-12-14 19:25:12 Frank Heimes ubuntu-z-systems: status Fix Committed Fix Released