From 17d9f2add61c104dc3517dfac0b87b1c21f9213c Mon Sep 17 00:00:00 2001 From: Takashi Kajinami Date: Thu, 13 Mar 2025 10:40:23 +0900 Subject: [PATCH] Fix minor formats of release note This is follow-up of 0d4101fa5da52f242ab0a52955f67769b23485a1 and fix a few format problems of the release note added by that change. - Italic is not quite visible and Bold would be preferred - The release note is not associated with individual change we should not mention "this change". - Add link to bug url so that people can find bug details more easily. Change-Id: Idd83933d14ecbf632b954db0bf898e322616bcde --- .../notes/fix-bug-2036506-bf171b5949495457.yaml | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/releasenotes/notes/fix-bug-2036506-bf171b5949495457.yaml b/releasenotes/notes/fix-bug-2036506-bf171b5949495457.yaml index f1853b555..b8a354aac 100644 --- a/releasenotes/notes/fix-bug-2036506-bf171b5949495457.yaml +++ b/releasenotes/notes/fix-bug-2036506-bf171b5949495457.yaml @@ -1,8 +1,8 @@ --- deprecations: - | - The `[p11_crypto_plugin]hmac_keywrap_mechanism` option has been replaced - by `[p11_crypto_plugin]hmac_mechanism`. This option was renamed to avoid + The ``[p11_crypto_plugin]hmac_keywrap_mechanism`` option has been replaced + by ``[p11_crypto_plugin]hmac_mechanism``. This option was renamed to avoid confusion since this mechanism is only used to sign encrypted data and never used for key wrap encryption. security: @@ -14,9 +14,10 @@ security: Version 3.0. fixes: - | - Fixed Bug #2036506 - This patch replaces the hard-coded CKM_AES_CBC_PAD - mechanism used to wrap pKEKs with an option to configure this mechanism. - Two new options have been added to the [p11_crypto_plugin] section of the - configuration file: `key_wrap_mechanism` and `key_wrap_generate_iv`. These - options default to `CKM_AES_CBC_PAD` and `True` respectively to preserve - backwards compatibility. + Bug `#2036506 `_: + Replaced the hard-coded CKM_AES_CBC_PAD mechanism used to wrap pKEKs with + an option to configure this mechanism. + Two new options have been added to the ``[p11_crypto_plugin]`` section of + the configuration file: ``key_wrap_mechanism`` and + ``key_wrap_generate_iv``. These options default to ``CKM_AES_CBC_PAD`` + and ``True`` respectively to preserve backwards compatibility.