OpenSolaris

You are not signed in. Sign in or register.

Flag Day: build machine update required following elfsign support of Verisign Trust Network

Date: Wed, 21 Feb 2007 09:21:24 -0800 (PST)
From: John Zolnowsky x69422/408-404-5064 <John.Zolnowsky at sun dot com>
To: onnv-gate at onnv dot eng dot sun dot com, on-all at eng dot sun dot com
Subject: Flag Day: build machine update required following elfsign support of Verisign Trust Network

It has been discovered that my recent putback into Nevada for

	CR 6391249: elfsign needs to support Verisign certificate chain

introduced a flag day for building of cryptographic modules.  Builds
performed using older versions of elfsign will have improperly-formed
signatures on cryptographic modules and libraries.  Symptoms will be
failure to register cryptographic kernel modules or verify pkcs11
plugin libraries.

Use of the nightly -t option will use the updated version of elfsign to
sign, avoiding the problem.  Build servers can be updated to have new
versions of /usr/bin/elfsign and /usr/lib/libelfsign.so.1.  The script
/net/onnv.sfbay/public/bin/update_elfsign, invoked by root, will update
these files with current versions.

I apologize for any inconvenience that this may have caused.

						-JZ