From 17d9f2add61c104dc3517dfac0b87b1c21f9213c Mon Sep 17 00:00:00 2001
From: Takashi Kajinami <kajinamit@oss.nttdata.com>
Date: Thu, 13 Mar 2025 10:40:23 +0900
Subject: [PATCH] Fix minor formats of release note
This is follow-up of 0d4101fa5da52f242ab0a52955f67769b23485a1 and
fix a few format problems of the release note added by that change.
- Italic is not quite visible and Bold would be preferred
- The release note is not associated with individual change we should
not mention "this change".
- Add link to bug url so that people can find bug details more
easily.
Change-Id: Idd83933d14ecbf632b954db0bf898e322616bcde
---
.../notes/fix-bug-2036506-bf171b5949495457.yaml | 17 +++++++++--------
1 file changed, 9 insertions(+), 8 deletions(-)
diff --git a/releasenotes/notes/fix-bug-2036506-bf171b5949495457.yaml b/releasenotes/notes/fix-bug-2036506-bf171b5949495457.yaml
index f1853b555..b8a354aac 100644
--- a/releasenotes/notes/fix-bug-2036506-bf171b5949495457.yaml
+++ b/releasenotes/notes/fix-bug-2036506-bf171b5949495457.yaml
@@ -1,8 +1,8 @@
---
deprecations:
- |
- The `[p11_crypto_plugin]hmac_keywrap_mechanism` option has been replaced
- by `[p11_crypto_plugin]hmac_mechanism`. This option was renamed to avoid
+ The ``[p11_crypto_plugin]hmac_keywrap_mechanism`` option has been replaced
+ by ``[p11_crypto_plugin]hmac_mechanism``. This option was renamed to avoid
confusion since this mechanism is only used to sign encrypted data and
never used for key wrap encryption.
security:
@@ -14,9 +14,10 @@ security:
Version 3.0.
fixes:
- |
- Fixed Bug #2036506 - This patch replaces the hard-coded CKM_AES_CBC_PAD
- mechanism used to wrap pKEKs with an option to configure this mechanism.
- Two new options have been added to the [p11_crypto_plugin] section of the
- configuration file: `key_wrap_mechanism` and `key_wrap_generate_iv`. These
- options default to `CKM_AES_CBC_PAD` and `True` respectively to preserve
- backwards compatibility.
+ Bug `#2036506 <https://bugs.launchpad.net/barbican/+bug/2036506>`_:
+ Replaced the hard-coded CKM_AES_CBC_PAD mechanism used to wrap pKEKs with
+ an option to configure this mechanism.
+ Two new options have been added to the ``[p11_crypto_plugin]`` section of
+ the configuration file: ``key_wrap_mechanism`` and
+ ``key_wrap_generate_iv``. These options default to ``CKM_AES_CBC_PAD``
+ and ``True`` respectively to preserve backwards compatibility.