kata-containers/s390-tools
1
0
Fork 0
mirror of https://github.com/ibm-s390-linux/s390-tools.git synced 2026-08-05 02:14:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

zkey: Enhance APQN cross check to check for firmware version

Browse Source 
EP11 secure keys require a certain firmware version. Enhance
the APQN cross check to not only check for a minimum card level,
but also for a minimum firmware version.

Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Reviewed-by: Harald Freudenberger <freude@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
This commit is contained in:
Ingo Franzki
2019-11-20 10:17:46 +01:00
committed by Jan Höppner
parent a7e47685e0
commit 88e6a18f96
7 changed files with 79 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
zkey/zkey.c
+5 -2
View File
@@ -1179,6 +1179,7 @@ static int command_generate(void)
rc = cross_check_apqns(NULL, NULL,
get_min_card_level_for_keytype(g.key_type),
get_min_fw_version_for_keytype(g.key_type),
get_card_type_for_keytype(g.key_type),
true, g.verbose);
if (rc == -EINVAL)
@@ -1510,6 +1511,7 @@ static int command_validate_file(void)
rc = cross_check_apqns(NULL, mkvp,
get_min_card_level_for_keytype(key_type),
get_min_fw_version_for_keytype(key_type),
get_card_type_for_keytype(key_type),
true, g.verbose);
if (rc == -EINVAL)
@@ -1786,8 +1788,9 @@ static int command_convert_file(void)
}
rc = cross_check_apqns(NULL, NULL, min_level,
get_card_type_for_keytype(g.key_type), true,
g.verbose);
get_min_fw_version_for_keytype(g.key_type),
get_card_type_for_keytype(g.key_type),
true, g.verbose);
if (rc == -EINVAL)
return EXIT_FAILURE;
if (rc != 0 && rc != -ENOTSUP) {