|
|
Flag Day: build machine update required following elfsign support of Verisign Trust NetworkDate: Wed, 21 Feb 2007 09:21:24 -0800 (PST) From: John Zolnowsky x69422/408-404-5064 <John.Zolnowsky at sun dot com> To: onnv-gate at onnv dot eng dot sun dot com, on-all at eng dot sun dot com Subject: Flag Day: build machine update required following elfsign support of Verisign Trust Network It has been discovered that my recent putback into Nevada for CR 6391249: elfsign needs to support Verisign certificate chain introduced a flag day for building of cryptographic modules. Builds performed using older versions of elfsign will have improperly-formed signatures on cryptographic modules and libraries. Symptoms will be failure to register cryptographic kernel modules or verify pkcs11 plugin libraries. Use of the nightly -t option will use the updated version of elfsign to sign, avoiding the problem. Build servers can be updated to have new versions of /usr/bin/elfsign and /usr/lib/libelfsign.so.1. The script /net/onnv.sfbay/public/bin/update_elfsign, invoked by root, will update these files with current versions. I apologize for any inconvenience that this may have caused. -JZ |