RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 533386 - [LTC 6.0 FEAT] ock 2.3 Enhancements [202047]
Summary: [LTC 6.0 FEAT] ock 2.3 Enhancements [202047]
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: opencryptoki
Version: 6.0
Hardware: All
OS: All
high
high
Target Milestone: beta
: 6.0
Assignee: Dan Horák
QA Contact: Miroslav Vadkerti
URL:
Whiteboard:
Depends On:
Blocks: 356741 554559 586908
TreeView+ depends on / blocked
 
Reported: 2009-11-06 14:41 UTC by IBM Bug Proxy
Modified: 2010-10-18 19:46 UTC (History)
9 users (show)

Fixed In Version: opencryptoki-2.3.0-4.1.el6
Doc Type: Enhancement
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-07-12 12:38:35 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
IBM Linux Technology Center 57659 0 None None None Never

Description IBM Bug Proxy 2009-11-06 14:41:12 UTC 
=Comment: #0=================================================
Robert Sisk <rsisk.com> - 
1. Feature Overview:
Feature Id:	[202047]
a. Name of Feature:	ock 2.3 Enhancements
b. Feature Description
Please update opencryptoki to version 2.3 
 to have support for libica 2.0 that is included in RHEL6:
 http://sourceforge.net/projects/opencryptoki/files/opencryptoki/2.3.0/opencryptoki-2.3.0.tar.gz/download
 
 The 2.3 version have some advantages compared to the 2.2.8 version:
 
 * It contains support for libica 2.0
 * It has support for 4096 bit keys
 
 Since in RHEL 6, libica 2.0.2 will be provided, it would make sense to provide
 also opencryptoki 2.3

2. Feature Details:
Sponsor:	LTC Security
Architectures:
x86
x86_64
ppc64
s390 native
s390 compat
s390x

Arch Specificity: Purely Common Code
Affects Toolchain: Yes
Delivery Mechanism: Direct from community
Category:	Security
Request Type:	Package - Feature from Upstream
d. Upstream Acceptance:	Accepted
Sponsor Priority	2
f. Severity: Medium
IBM Confidential:	no
Code Contribution:	IBM code
g. Component Version Target:	ock 2.3

3. Business Case
This line item is to fully support the IBM HW crypto enhancement. 
 It is needed to exploit the recently announced crypto Express 3 card

4. Primary contact at Red Hat: 
John Jarvis: jjarvis

5. Primary contacts at Partner:
Project Management Contact: Mike Wortman, wortman.com

Technical contact(s):
George Wilson, gcwilson.com
Rajiv Augusto Santos Galvao de Andrade, srajiv.com

IBM Manager:
Bryan Jacobson, bjacobson.com
Comment 2 Dan Horák 2009-11-09 10:12:56 UTC 
version 2.3.0 is in Fedora 12 since Aug 8
Comment 4 Chris Ward 2009-11-25 10:11:49 UTC 
@Reporters

We need to confirm that there is third-party commitment to 
test for the resolution of this request during the RHEL 6.0 
Beta Test Phase before we can approve it for acceptance 
into the release.

In order to avoid any unnecessary delays, please post a 
confirmation as soon as possible, including the contact 
information for testing engineers.

Any additional information about alternative testing variations we 
could use to reproduce this issue in-house would be appreciated.
Comment 5 John Jarvis 2009-11-25 17:14:01 UTC 
IBM is signed up to test and provided feedback.
Comment 6 releng-rhel@redhat.com 2009-12-16 21:51:35 UTC 
Fixed in 'opencryptoki-2.3.0-4.fc12'. 'opencryptoki-2.3.0-4.1.el6' included in compose 'RHEL6.0-20091216.nightly'.
Moving to ON_QA.
Comment 9 Miroslav Vadkerti 2010-04-08 04:31:57 UTC 
Fixed in opencryptoki-2.3.0-4.fc12? Correcting to: opencryptoki-2.3.0-4.1.el6.

John, RHEL6.0-Beta1-3.0 contains package opencryptoki-2.3.0-4.1.el6. AFAIK IBM should have availibility for this tree. Am I wrong?
Comment 10 Miroslav Vadkerti 2010-06-01 09:02:59 UTC 
@IBM, you can use any of the latest composes which contains the fixed version of the package.
Comment 14 IBM Bug Proxy 2010-06-09 21:11:38 UTC 
------- Comment From klausk.com 2010-06-09 17:00 EDT-------
RHEL 6 snap 5:

[root@h05lp48 driver]# rpm -qa | grep opencryptoki
opencryptoki-libs-2.3.1-3.el6.s390x
opencryptoki-devel-2.3.1-3.el6.s390x
opencryptoki-libs-2.3.1-3.el6.s390
opencryptoki-2.3.1-3.el6.s390x
opencryptoki-devel-2.3.1-3.el6.s390
[root@h05lp48 driver]# rpm -qa | grep libica
libica-2.0.3-1.el6.s390x
libica-devel-2.0.3-1.el6.s390x
libica-2.0.3-1.el6.s390
libica-devel-2.0.3-1.el6.s390
[root@h05lp48 driver]#

Looks like we are good. Nageswara will open more bugs as it looks like the CCA token is not being built (whereas the tpm token is being shipped in the s390x arch), but we can track them elsewhere.

Both opencryptoki and libica are at their latest versions.

-Klaus
Comment 15 Dan Horák 2010-06-15 18:49:48 UTC 
IBM, please open the new bug for any missing functionality ASAP. Thanks.
Comment 16 Miroslav Vadkerti 2010-06-17 05:12:44 UTC 
Compose 20100603.1 contain:
opencryptoki-2.3.1-4.el6
libica-2.0.3-2.el6

RPMdiff results waived - OK
All RHTS tests - PASS

Setting SanityOnly
Comment 17 IBM Bug Proxy 2010-06-24 11:21:26 UTC 
------- Comment From klausk.com 2010-06-24 07:19 EDT-------
Red Hat,

re-opened due to Bug #62929   -  RIT819063- opencryptoki-2.3 packages missing from RHEL6 on s390 platform

-Klaus
Comment 20 Chris Ward 2010-07-12 12:38:35 UTC 
Red Hat Enterprise Linux Beta 2 is now available and should resolve
the problem described in this bug report. One or more confirmation reports have already been received confirming this. This report is therefore being closed with a resolution of CURRENTRELEASE. You may reopen this bug report if the solution does not work for you.
Comment 21 IBM Bug Proxy 2010-07-27 17:41:28 UTC 
------- Comment From klausk.com 2010-07-27 13:37 EDT-------
Following BZ #62929 status. This feature appears to be verified.
Note You need to log in before you can comment on or make changes to this bug.