kata-containers/s390-tools
1
0
Fork 0
mirror of https://github.com/ibm-s390-linux/s390-tools.git synced 2026-08-05 02:14:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

zkey: Adjust the error message when calculating the KVP fails

Browse Source 
The 'paes' and 'phmac' kernel ciphers and the respective kernel modules
are no longer used for calculating the key verification pattern. Instead,
the 'pkey' kernel module and its sub modules is used now.

In case the 'pkey' kernel module is not available, an appropriate error
message is already printed by open_pkey_device() when opening the device.

Reviewed-by: Finn Callies <fcallies@linux.ibm.com>
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
This commit is contained in:
Ingo Franzki
2026-06-08 13:32:43 +02:00
committed by Jan Höppner
parent 7fffdcfe8c
commit 584e785f5c
4 changed files with 0 additions and 56 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
zkey/keystore.c
View File

@@ -2101,10 +2101,6 @@ static int _keystore_create_info_file(struct keystore *keystore,
if (rc != 0) {
warnx("Failed to generate the key verification pattern: %s",
strerror(-rc));
warnx("Make sure that kernel module '%s' is loaded and "
"that the '%s' cipher is available",
is_aes_key_type(key_type) ? "paes_s390" : "phmac_s390",
is_aes_key_type(key_type) ? "paes" : "phmac");
remove(filenames->pass_filename);
goto out;
}
@@ -2400,10 +2396,6 @@ int keystore_generate_key_kms(struct keystore *keystore, const char *name,
if (rc != 0) {
warnx("Failed to generate the key verification pattern: %s",
strerror(-rc));
warnx("Make sure that kernel module '%s' is loaded and "
"that the '%s' cipher is available",
is_aes_key_type(key_type) ? "paes_s390" : "phmac_s390",
is_aes_key_type(key_type) ? "paes" : "phmac");
goto out_free_props;
}
@@ -3913,12 +3905,6 @@ static int _keystore_process_reencipher(struct keystore *keystore,
warnx("Failed to generate the key verification pattern "
"for key '%s': %s", file_names->skey_filename,
strerror(-rc));
warnx("Make sure that kernel module '%s' is loaded and "
"that the '%s' cipher is available",
is_aes_key(secure_key, secure_key_size) ?
"paes_s390" : "phmac_s390",
is_aes_key(secure_key, secure_key_size) ?
"paes" : "phmac");
goto out;
}
@@ -6170,12 +6156,6 @@ prompt_alt_name:
if (rc != 0) {
warnx("Failed to generate the key verification pattern: %s",
strerror(-rc));
warnx("Make sure that kernel module '%s' is loaded and "
"that the '%s' cipher is available",
is_aes_key(secure_key, secure_key_size) ?
"paes_s390" : "phmac_s390",
is_aes_key(secure_key, secure_key_size) ?
"paes" : "phmac");
fatal_err = true;
goto out_remove;
}