Bug 1059821
Summary: | Unable to load bundled plugins | ||
---|---|---|---|
Product: | Red Hat Enterprise Linux 7 | Reporter: | Nalin Dahyabhai <nalin> |
Component: | opencryptoki | Assignee: | Jakub Jelen <jjelen> |
Status: | CLOSED ERRATA | QA Contact: | Karel Srot <ksrot> |
Severity: | medium | Docs Contact: | |
Priority: | unspecified | ||
Version: | 7.0 | CC: | bugproxy, hannsj_uhl, ksrot, nmavrogi |
Target Milestone: | rc | ||
Target Release: | 7.3 | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | opencryptoki-3.5-3.el7 | Doc Type: | Bug Fix |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2016-11-04 00:30:52 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 1230910 |
Description
Nalin Dahyabhai
2014-01-30 18:26:15 UTC
opencryptoki package was split and the plugins are now in subpackages: opencryptoki-ccatok.s390x : CCA cryptographic devices (secure-key) support for opencryptoki-icatok.s390x : ICA cryptographic devices (clear-key) support for opencryptoki-icsftok.s390x : ICSF token support for opencryptoki opencryptoki-swtok.s390x : The software token implementation for opencryptoki opencryptoki-tpmtok.s390x : Trusted Platform Module (TPM) device support for Installing all the sub-packages should solve this issue. I'm postponing this for rhel-7.1.0. It's expected behaviour but messages could be more informative. I don't think it is an issue any more. Currently main opencryptoki package Requires: %{name}(token) and libraries Provides: %{name}(token) which means that you need to have at least one token installed with opencryptoki package (swtok usually). It was added in [1], and fixed with bug #904986 years ago. Can you please verify if it works? [1] http://pkgs.devel.redhat.com/cgit/rpms/opencryptoki/commit/?id=6294303b305c1941009d0695485eca48810b4f81 Ok, the logs in the journal are a bit annoying. But dlopen() does not give us any guide why the action failed, except the string returned from dlerror(). The only thing we can do about it from my current understanding is to make it more silent in the logs. Instead of LOG_ERR (which it is not), LOG_WARNING or LOG_NOTICE should be appropriate. I will send mail upstream to check if it is appropriate solution. FYI, this was fixed in upstream (removing Cond NACK): https://sourceforge.net/p/opencryptoki/opencryptoki/ci/786b6a4223119501f4aa7faf5a413c1ba10e38f6/ But I just finished a build for rhel-7.3. If we will do one more respin, I will cover also this fix. Otherwise it will be in the Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2016-2212.html |