31 lines
1.1 KiB
YAML
31 lines
1.1 KiB
YAML
---
|
|
prelude: >
|
|
This release includes significant improvements to the performance
|
|
of the PKCS#11 Cryptographic Plugin driver. These changes will require
|
|
a data migration of any existing data stored by previous versions
|
|
of the PKCS#11 backend.
|
|
issues:
|
|
- >
|
|
The service will encounter errors if you attempt to run this new release
|
|
using data stored by a previous version of the PKCS#11 Cryptographic Plugin
|
|
that has not yet been migrated for this release. The logged errors
|
|
will look like
|
|
|
|
``'P11CryptoPluginException: HSM returned response code: 0xc0L CKR_SIGNATURE_INVALID'``
|
|
|
|
upgrade:
|
|
- >
|
|
If you are upgrading from previous version of barbican that uses the
|
|
PKCS#11 Cryptographic Plugin driver, you will need to run the migration
|
|
script
|
|
|
|
``python barbican/cmd/pkcs11_migrate_kek_signatures.py``
|
|
|
|
critical:
|
|
- >
|
|
If you are upgrading from previous version of barbican that uses the
|
|
PKCS#11 Cryptographic Plugin driver, you will need to run the migration
|
|
script
|
|
|
|
``python barbican/cmd/pkcs11_migrate_kek_signatures.py``
|