Bug 965152

Hi, Ademar
As we discussed in bug 917860 comment 12, this bug should be included in the current rhel6.4-z errata 2013:14833. And the rhel6.5 bug 917860 has been in POST status. So just want to confirm with you when this bug fix could get into the official rhel6.4-z build?  As QE need to run a round of acceptance test or some function test if needed in the final z-stream build. And currently the errata is in QE status again with some new bug included.


Thanks,
Qunfang

(In reply to Qunfang Zhang from comment #4)
> Hi, Ademar
> As we discussed in bug 917860 comment 12, this bug should be included in the
> current rhel6.4-z errata 2013:14833. And the rhel6.5 bug 917860 has been in
> POST status. So just want to confirm with you when this bug fix could get
> into the official rhel6.4-z build?  As QE need to run a round of acceptance
> test or some function test if needed in the final z-stream build. And
> currently the errata is in QE status again with some new bug included.
> 
> 
> Thanks,
> Qunfang

Hi, Ademar
I'm forwarded another mail and I got that this bug will not be in the errata. So please ignore my last comment. Sorry for the noisy.

Thanks,
Qunfang

Reproduced and verified this bug.

Steps:
1. launch a windows 7 x86_64 guest with smartcard support:
# /usr/libexec/qemu-kvm -name test -M rhel6.4.0 -enable-kvm -cpu host -m 2048 -smp 2,sockets=2,cores=1,threads=1 -nodefaults -netdev tap,id=hostnet0 -device e1000,netdev=hostnet0,id=net0,mac=22:33:4a:42:76:36,bus=pci.0 -k en-us -vga qxl -spice port=7000,disable-ticketing -chardev spicevmc,name=smartcard,id=ccid -device usb-ccid -device ccid-card-passthru,chardev=ccid -usb -monitor stdio -boot menu=on -drive file=/home/chayang/win-7_x86_64.qcow2,if=none,id=drive-virtio-disk0,format=qcow2,cache=none,werror=stop,rerror=stop,aio=native -device ide-drive,bus=ide.0,unit=0,drive=drive-virtio-disk0,id=virtio-disk0 -cdrom en_windows_7_ultimate_with_sp1_x64_dvd_u_677332.iso 

2. create certificates on client:
# certutil -x -t "CT,CT,CT" -S -s "CN=cert1" -n cert1 -d /etc/pki/nssdb/
# certutil -x -t "CT,CT,CT" -S -s "CN=cert2" -n cert2 -d /etc/pki/nssdb/
# certutil -x -t "CT,CT,CT" -S -s "CN=cert3" -n cert3 -d /etc/pki/nssdb/

# certutil -L -d /etc/pki/nssdb/

Certificate Nickname                                         Trust Attributes
                                                             SSL,S/MIME,JAR/XPI

cert3                                                        CTu,Cu,Cu
cert1                                                        CTu,Cu,Cu
cert2                                                        CTu,Cu,Cu

3. connect to guest with remote-viewer:
remote-viewer spice://xxxx:7000 --spice-smartcard --spice-smartcard-db /etc/pki/nssdb/ --spice-smartcard-certificates cert1,cert2,cert3

4. run ESC in guest


Reproduction:
------------
With qemu-kvm-0.12.1.2-2.355.el6.x86_64. ECS cannot view certificates. And in system log:
Event[82]:
  Log Name: System
  Source: Microsoft-Windows-Smartcard-Server
  Date: 2013-08-29T10:19:22.000
  Event ID: 610
  Task: N/A
  Level: Error
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: test-PC
  Description:
Smart Card Reader 'QEMU 0.12.1 QEMU USB CCID 0' rejected IOCTL TRANSMIT: The request could not be performed because of an I/O device error.  If this error persists, your smart card or reader may not be functioning correctly.

Event[86]:
  Log Name: System
  Source: WudfUsbccidDriver
  Date: 2013-08-29T10:19:22.031
  Event ID: 5
  Task: Driver
  Level: Error
  Opcode: General
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: test-PC
  Description:
Unexpected size.

Event[87]:
  Log Name: System
  Source: WudfUsbccidDriver
  Date: 2013-08-29T10:19:22.031
  Event ID: 10
  Task: Driver
  Level: Error
  Opcode: Ioctl
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: test-PC
  Description:
Request[0](CLS=0x0,INS=0xa4,P1=0x4,P2=0x0,Lc=9,Le=0,.NETServiceMethod=0x0)

Event[88]:
  Log Name: System
  Source: WudfUsbccidDriver
  Date: 2013-08-29T10:19:22.484
  Event ID: 5
  Task: Driver
  Level: Error
  Opcode: General
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: test-PC
  Description:
Unexpected size.


Verifications:
-------------
With qemu-kvm-0.12.1.2-2.355.el6_4.8.x86_64.rpm. ESC can view certificates correctly. 

No related WudfUsbccidDriver error any more:
Event[63]:
  Log Name: System
  Source: WudfUsbccidDriver
  Date: 2013-08-29T10:40:51.312
  Event ID: 104
  Task: Driver
  Level: Information
  Opcode: General
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: test-PC
  Description:
The Smartcard reader reported the following class descriptor (part 1).

Event[64]:
  Log Name: System
  Source: WudfUsbccidDriver
  Date: 2013-08-29T10:40:51.312
  Event ID: 105
  Task: Driver
  Level: Information
  Opcode: General
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: test-PC
  Description:
The Smartcard reader reported the following class descriptor (part 2).

Based on above, this issue has been fixed.

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2013-1401.html