Add PKCS#11 upgrade release note
Change-Id: Ic0b70f331ebe2dddada247615d8c64b32300c4b4
This commit is contained in:
parent
30f74095b0
commit
8c2893d8eb
@ -0,0 +1,30 @@
|
||||
---
|
||||
prelude: >
|
||||
This release includes significant improvements to the performance
|
||||
of the PKCS#11 Cryptographic Plugin driver. These changes will require
|
||||
a data migration of any existing data stored by previous versions
|
||||
of the PKCS#11 backend.
|
||||
issues:
|
||||
- >
|
||||
The service will encounter errors if you attempt to run this new release
|
||||
using data stored by a previous version of the PKCS#11 Cryptographic Plugin
|
||||
that has not yet been migrated for this release. The logged errors
|
||||
will look like
|
||||
|
||||
``'P11CryptoPluginException: HSM returned response code: 0xc0L CKR_SIGNATURE_INVALID'``
|
||||
|
||||
upgrade:
|
||||
- >
|
||||
If you are upgrading from previous version of barbican that uses the
|
||||
PKCS#11 Cryptographic Plugin driver, you will need to run the migration
|
||||
script
|
||||
|
||||
``python barbican/cmd/pkcs11_migrate_kek_signatures.py``
|
||||
|
||||
critical:
|
||||
- >
|
||||
If you are upgrading from previous version of barbican that uses the
|
||||
PKCS#11 Cryptographic Plugin driver, you will need to run the migration
|
||||
script
|
||||
|
||||
``python barbican/cmd/pkcs11_migrate_kek_signatures.py``
|
Loading…
x
Reference in New Issue
Block a user