|
|
Flag Day: IPsec and Huron based machines (fwd)Date: Wed, 29 Nov 2006 16:58:10 -0800 (PST) From: Valerie Anne Bubb <Valerie.Bubb at Sun dot COM> To: onnv-gate at onnv dot eng dot sun dot com Subject: Flag Day: IPsec and Huron based machines (fwd) Gatelings & Build machine maintainers - If you do not plan on using IPsec on Huron based machines, you may disregard this message. Action required if you want a functioning activation file for IPsec: * build using the -t option or * upgrade the build macine to snv_53 or higher. The Huron project integration on 22 November 2006 represents the first use of the functionality introduced by PSARC 2003/627 Retail/nonretail status for Solaris Cryptographic Framework. by anything in the ON gate (previous uses were all for unbundled products on top of S10). This functionality did not work in Nevada, due to: 6489058 elfsign generates bogus activation files Which was introduced in snv_17 and I fixed in snv_53. If you do not perform one of the above workarounds, you will find that IPsec is not being accelerated by the hardware and if you try to verify the module manually, you will get an error like: ryoga-54% elfsign verify -e ./dprov elfsign: Unable to verify .esa contents elfsign: verification of ./dprov passed, but restricted. Valerie -- Valerie Bubb, http://blogs.sun.com/bubbva Solaris Security Technologies, Developer, Sun Microsystems, Inc. 17 Network Circle, Menlo Park, CA, 94025. 650-786-0461 |