openstack/barbican
Code Issues Proposed changes

Fix minor formats of release note

Browse Source 
This is follow-up of 0d4101fa5da52f242ab0a52955f67769b23485a1 and
fix a few format problems of the release note added by that change.

 - Italic is not quite visible and Bold would be preferred

 - The release note is not associated with individual change we should
   not mention "this change".

 - Add link to bug url so that people can find bug details more
   easily.

Change-Id: Idd83933d14ecbf632b954db0bf898e322616bcde
This commit is contained in:
Takashi Kajinami 2025-03-13 10:40:23 +09:00
parent 4500d9f485
commit 17d9f2add6
1 changed files with 9 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
releasenotes/notes/fix-bug-2036506-bf171b5949495457.yaml
View File

@ -1,8 +1,8 @@
---
deprecations:
- |
The `[p11_crypto_plugin]hmac_keywrap_mechanism` option has been replaced
by `[p11_crypto_plugin]hmac_mechanism`. This option was renamed to avoid
The ``[p11_crypto_plugin]hmac_keywrap_mechanism`` option has been replaced
by ``[p11_crypto_plugin]hmac_mechanism``. This option was renamed to avoid
confusion since this mechanism is only used to sign encrypted data and
never used for key wrap encryption.
security:
@ -14,9 +14,10 @@ security:
Version 3.0.
fixes:
- |
Fixed Bug #2036506 - This patch replaces the hard-coded CKM_AES_CBC_PAD
mechanism used to wrap pKEKs with an option to configure this mechanism.
Two new options have been added to the [p11_crypto_plugin] section of the
configuration file: `key_wrap_mechanism` and `key_wrap_generate_iv`. These
options default to `CKM_AES_CBC_PAD` and `True` respectively to preserve
backwards compatibility.
Bug `#2036506 <https://bugs.launchpad.net/barbican/+bug/2036506>`_:
Replaced the hard-coded CKM_AES_CBC_PAD mechanism used to wrap pKEKs with
an option to configure this mechanism.
Two new options have been added to the ``[p11_crypto_plugin]`` section of
the configuration file: ``key_wrap_mechanism`` and
``key_wrap_generate_iv``. These options default to ``CKM_AES_CBC_PAD``
and ``True`` respectively to preserve backwards compatibility.