[Pki-devel] [PATCH] 849-850 Fixed KRA key recovery via CLI in FIPS mode.

Endi Sukma Dewata edewata at redhat.com
Tue Nov 1 23:06:57 UTC 2016


Based on investigation and solution provided by cfu and jmagne,
the SecurityDataRecoveryService.serviceRequest() has been modified
to use EncryptionUnit.unwrap_temp() for key recovery via CLI in
FIPS mode.

The code in SecurityDataRecoveryService.serviceRequest() has been
reformatted for clarity.

https://fedorahosted.org/pki/ticket/2500

ACKed and tested by cfu and jmagne. Pushed to master.

-- 
Endi S. Dewata
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pki-edewata-0849-Reformatted-SecurityDataRecoveryService.serviceReque.patch
Type: text/x-patch
Size: 7284 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/pki-devel/attachments/20161101/5f292f64/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pki-edewata-0850-Fixed-KRA-key-recovery-via-CLI-in-FIPS-mode.patch
Type: text/x-patch
Size: 2321 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/pki-devel/attachments/20161101/5f292f64/attachment-0001.bin>


More information about the Pki-devel mailing list