[UBUNTU] zkey: Enhance error message about missing CCA library.

[bugproxy]

Description:
zkey: Enhance error message about missing CCA library.

Symptom:
"zkey-cryptsetup reencipher" fails with missing library and confusing error message.

Problem:
The "zkey reencipher" command as well as the "zkey-cryptsetup reencipher" command requires the IBM CCA Host Libraries and Tools package to be installed. This is a closed source library that is not distributed by the distributions, but must be downloaded separately from an IBM web page.

Solution:
Enhance the error message to point to the web page where the package can be downloaded.

Reproduction:
Run the "zkey-cryptsetup reencipher" or "zkey reencipher" command without having installed the IBM CCA Host Libraries and Tools package.

Upstream commit(s):
5a10aa73a97b18bf572523e7f86d48797071fb38

package: s390-tools

[Dimitri John Ledkov (xnox)]

What's the point of us shipping zkey-cryptsetup then?

Can you like package IBM CCA Host libraries and tools as a snap, including the zkey-cryptsetup command?

[bugproxy (bugproxy)]

------- Comment From <email address hidden> 2019-01-07 04:24 EDT-------
zkey-cryptsetup (as well as zkey) is delivered as part of the s390-tool package.

Only one subcommand of zkey-cryptsetup depends on this library, other subcommands work well without. That's why it is coded as a 'soft-dependency' checked during runtime.

So shipping it even without having the CCA library makes totally sense.

Users of secure key disk encryption (for which this tool is needed) know that they require an CCA crypto adapter together with the CCA library. So most of them have the CCA library installed anyway.

[Launchpad Janitor (janitor)]

This bug was fixed in the package s390-tools - 2.7.1-0ubuntu1

---------------
s390-tools (2.7.1-0ubuntu1) disco; urgency=medium

  * New upstream release:
    - zkey: Enhance error message about missing CCA library. LP: #1808520
    - Extended access controls for AP queue LP: #1804019
    - PCI error reporting tool LP: #1802499
    - zcrypt DD: introduce APQN tags to support deterministic driver
    binding LP: #1800867

 -- Dimitri John Ledkov <email address hidden> Tue, 15 Jan 2019 14:23:22 +0000

[bugproxy (bugproxy)]

------- Comment From <email address hidden> 2019-01-16 04:40 EDT-------
IBM bugzilla status-> closed, Fix Released with 19.04. First occurance with 18.10, but no backport for 18.04 required. MInor Issue.