------- Comment From jschm...@de.ibm.com 2020-11-12 11:07 EDT-------
Hello Brian,

Good news: I could verify your ppa successfully. I ran into several
problems setting up a test system for this verification, but finally got
it to work.

Output from the pkcsep11_migrate utility without your ppa:

# pkcsep11_migrate -slot 4 -adapter 16 -domain 76
Using slot #4...
Enter the USER PIN:
Card ID 0x10, domain ID 76 has committed pending(next) WK
going to reencrpyt key 0 with blob len 0 rsakey
reencryption success obj 0 rsakey
going to reencrpyt key 1 with blob len 30820122300d0609 rsakey
reencrypt cmd block construction failed

Output after I applied the ppa:

# pkcsep11_migrate -slot 4 -adapter 16 -domain 76
Using slot #4...
Enter the USER PIN:
Card ID 0x10, domain ID 76 has committed pending(next) WK
going to reencrpyt key 0 with blob len 970: 'rsakey'
reencryption success obj: 0 rsakey:
going to reencrpyt key 1 with blob len 1a6: 'rsakey'
reencryption success obj: 1 rsakey:
all keys successfully reencrypted

So ok from my side. Sorry for the long delay!
Joerg

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1854148

Title:
  [UBUNTU] openCryptoki: pkcsep11_migrate: Fix re-encryption of EP11 key
  blobs

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1854148/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to