openstack/barbican
Code Issues Proposed changes

Add PKCS#11 upgrade release note

Browse Source 
Change-Id: Ic0b70f331ebe2dddada247615d8c64b32300c4b4
This commit is contained in:
Douglas Mendizábal 2016-03-17 13:23:35 -05:00
parent 30f74095b0
commit 8c2893d8eb
1 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
releasenotes/notes/pkcs11-backend-performance-f3caacbe9e1ab535.yaml Normal file
View File

@ -0,0 +1,30 @@
---
prelude: >
This release includes significant improvements to the performance
of the PKCS#11 Cryptographic Plugin driver. These changes will require
a data migration of any existing data stored by previous versions
of the PKCS#11 backend.
issues:
- >
The service will encounter errors if you attempt to run this new release
using data stored by a previous version of the PKCS#11 Cryptographic Plugin
that has not yet been migrated for this release. The logged errors
will look like
``'P11CryptoPluginException: HSM returned response code: 0xc0L CKR_SIGNATURE_INVALID'``
upgrade:
- >
If you are upgrading from previous version of barbican that uses the
PKCS#11 Cryptographic Plugin driver, you will need to run the migration
script
``python barbican/cmd/pkcs11_migrate_kek_signatures.py``
critical:
- >
If you are upgrading from previous version of barbican that uses the
PKCS#11 Cryptographic Plugin driver, you will need to run the migration
script
``python barbican/cmd/pkcs11_migrate_kek_signatures.py``