OpenSolaris

Flag Day: check_rtime.pl updated

Date: Fri, 17 Jul 2009 20:05:43 -0700 (PDT)
From: Valerie Bubb Fenwick <Valerie.Fenwick at sun dot com>
To: on-all at sun dot com, onnv-gate at onnv dot eng dot sun dot com
Subject: Flag Day: check_rtime.pl updated

My integration for:
6852240 libelfsign should use pkcs11_softtoken instead of OpenSSL for
         FIPS-140 integrity checking
6851814 tools elfsign is unnecessarily linked against pkcs11_softtoken

Constitutes a flag day for build machine maintainers and a heads up for
ON developers. You will need to update your check_rtime scripts or
your builders will need to use the -t option to nightly.  If you don't,
you will see the following errors:

./lib/crypto/kcfd: unreferenced object=/builds/bubbva/fips-cleanup/proto/root_sparc/lib/libkcfd.so.1; unused dependency of /builds/bubbva/fips-cleanup/proto/root_sparc/lib/crypto/kcfd <remove lib or -zignore?>
./lib/crypto/kcfd: unreferenced object=/builds/bubbva/fips-cleanup/proto/root_sparc/usr/lib/libpkcs11.so.1; unused dependency of /builds/bubbva/fips-cleanup/proto/root_sparc/lib/libkmf.so.1   <remove lib or -zignore?>
./lib/crypto/kcfd: unused object=/builds/bubbva/fips-cleanup/proto/root_sparc/usr/lib/libpkcs11.so.1    <remove lib or -zignore?>

Basically, just follow the instructions from Vijay HN's flag day
earlier today and you'll be fine.

Valerie
~--
Valerie Fenwick, http://blogs.sun.com/bubbva/ @bubbva
Solaris Security Technologies, Developer, Sun Microsystems, Inc.
17 Network Circle, Menlo Park, CA, 94025.