Bug 1102930

Summary: pesign errors out on fedora 20
Product: [Fedora] Fedora Reporter: Kevin Fenzi <kevin>
Component: pesignAssignee: Peter Jones <pjones>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 20CC: pjones
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: pesign-0.108-2.fc20 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-05-30 23:53:12 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Kevin Fenzi 2014-05-29 20:49:24 UTC
Upgraded kernel builders from el6 to f20 and got the following pesign errors: 

May 29 16:36:17 bkernel01.phx2.fedoraproject.org systemd[1]: Started Pesign signing daemon.
May 29 16:42:27 bkernel01.phx2.fedoraproject.org pesignd[3637]: unlocking token "OpenSC Card (Fedora Signer)"
May 29 16:42:28 bkernel01.phx2.fedoraproject.org pesignd[3637]: authentication succeeded for token "OpenSC Card (Fedora Signer)"
May 29 17:38:30 bkernel01.phx2.fedoraproject.org pesignd[3637]: unlock-token: invalid data
May 29 17:38:30 bkernel01.phx2.fedoraproject.org pesignd[3637]: possible exploit attempt. closing.
May 29 17:38:30 bkernel01.phx2.fedoraproject.org pesignd[3637]: unlock-token: invalid data
May 29 17:38:30 bkernel01.phx2.fedoraproject.org pesignd[3637]: possible exploit attempt. closing.
May 29 17:38:30 bkernel01.phx2.fedoraproject.org pesignd[3637]: attempting to sign with key "OpenSC Card (Fedora Signer):/CN=Fedora Secure Boot Signer"
May 29 17:38:30 bkernel01.phx2.fedoraproject.org pesignd[3637]: could not parse PE binary: invalid file descriptor
May 29 17:38:30 bkernel01.phx2.fedoraproject.org pesignd[3637]: could not send response to client: Bad file descriptor

Formerly using: pesign-0.106-1.el6.x86_64 everything worked fine. 
Using now: pesign-0.108-1.fc20.x86_64 things don't work.

Comment 1 Fedora Update System 2014-05-29 20:53:38 UTC
pesign-0.108-2.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/pesign-0.108-2.fc20

Comment 2 Fedora Update System 2014-05-30 23:53:12 UTC
pesign-0.108-2.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.