Public bug reported: Details ======= An opencryptoki symmetric key object wrapped by the IBM CCA DES master key cannot be migrated from a previous master key stored in the OLD register to a newer master key stored in the CURRENT register, when a token with a higher index is used, than number of tokens are available. The problem remains when the CCA token is indexed as token 0, as well as when the ICA token is defined in addition and the ICA token is token 0 and CCA is token 1.
Fix === The following commit has been verified to fix this issue: https://github.com/opencryptoki/opencryptoki/commit/f1f176cbb4183bcb8a0f7b4d7f649d84a731dd43.patch "[PATCH] A slot ID has nothing to do with the number of slots" This git commit need to be applied to all version with opencrycpptoki >= 3.4 xenial (16.04LTS) (utils): 3.4.1+dfsg-1ubuntu3 bionic (18.04LTS) (utils): 3.9.0+dfsg-0ubuntu1 focal (20.04LTS) (utils): 3.13.0+dfsg-0ubuntu5: groovy (20.10) (utils): 3.14.0+dfsg-0ubuntu3 hirsute (utils): 3.14.0+dfsg-0ubuntu3 ** Affects: opencryptoki (Ubuntu) Importance: Undecided Assignee: Skipper Bug Screeners (skipper-screen-team) Status: New ** Tags: architecture-s39064 bugnameltc-191527 severity-high targetmilestone-inin2104 ** Tags added: architecture-s39064 bugnameltc-191527 severity-high targetmilestone-inin2104 ** Changed in: ubuntu Assignee: (unassigned) => Skipper Bug Screeners (skipper-screen-team) ** Package changed: ubuntu => opencryptoki (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1915517 Title: [UBUNTU 21.04] openCryptoki: pkcscca migration fails with usr/sb2 is not a valid slot ID To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/opencryptoki/+bug/1915517/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
