openstack/barbican
Code Issues Proposed changes

Merge "Add PKCS#11 upgrade release note"

Browse Source
This commit is contained in:
Jenkins 2016-03-21 21:59:04 +00:00 committed by Gerrit Code Review
commit 814cc9d5c2
1 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
releasenotes/notes/pkcs11-backend-performance-f3caacbe9e1ab535.yaml Normal file
View File

@ -0,0 +1,30 @@
---
prelude: >
This release includes significant improvements to the performance
of the PKCS#11 Cryptographic Plugin driver. These changes will require
a data migration of any existing data stored by previous versions
of the PKCS#11 backend.
issues:
- >
The service will encounter errors if you attempt to run this new release
using data stored by a previous version of the PKCS#11 Cryptographic Plugin
that has not yet been migrated for this release. The logged errors
will look like
``'P11CryptoPluginException: HSM returned response code: 0xc0L CKR_SIGNATURE_INVALID'``
upgrade:
- >
If you are upgrading from previous version of barbican that uses the
PKCS#11 Cryptographic Plugin driver, you will need to run the migration
script
``python barbican/cmd/pkcs11_migrate_kek_signatures.py``
critical:
- >
If you are upgrading from previous version of barbican that uses the
PKCS#11 Cryptographic Plugin driver, you will need to run the migration
script
``python barbican/cmd/pkcs11_migrate_kek_signatures.py``