openstack
/
openstack
Code Issues Proposed changes

Update git submodules 

* Update barbican from branch 'master'
  - Merge "Made HMAC Key Wrap mechanism configurable"
  - Made HMAC Key Wrap mechanism configurable
    
    Introduced the parameter 'hmac_keywrap_mechanism' in group
    '[p11_crypto_plugin]' in Barbican config. The default value, which were
    hard coded before, is 'CKM_SHA256_HMAC'. This defines the machanism used
    to compute the HMAC from an wrapped PKEK. However with Utimaco HSMs this
    leads to an CKR_MECHANISM_INVALID error. Therefore for Utimaco HSMs
    'hmac_keywrap_mechanism' has to be changed to 'CKM_AES_MAC'.
    
    Change-Id: I53537a96bc4b2acb30be5fa85e10bac89917851f
    Story: 2004833
    Task: 29027
This commit is contained in:
Zuul 2019-03-07 22:28:11 +00:00 committed by Gerrit Code Review
parent f7ad3ff1ed
commit 17e27310d4
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
barbican

@ -1 +1 @@
Subproject commit 08d557b5c666eacb4b9fb22e96be433990dfe70a
Subproject commit 4c0ddda941289fba8e5ec4341b5d02d155d46162