[389-commits] ldap/servers

ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

New commits:
commit bc98362705bfef62e06d482b0f4622f2c48fda3b
Author: Noriko Hosoi <nhosoi@redhat.com>
Date: Thu Jul 10 13:54:35 2014 -0700

Ticket #47832 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro

Description: attrcrypt_generate_key was passing an improper macro
CKA_DECRYPT, which is a super set of the correct one CKF_DECRYPT.
Thanks to Bob Relyea (rrelyea@redhat.com) for finding it out.

https://fedorahosted.org/389/ticket/47832

Reviewed by nhosoi@redhat.com.

diff --git a/ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c b/ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c
index f4a5d1a..41856d5 100644
--- a/ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c
+++ b/ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c
@@ -344,7 +344,7 @@ attrcrypt_generate_key(attrcrypt_cipher_state *acs,PK11SymKey **symmetric_key)
0 /*param*/,
acs->ace->key_size,
NULL /*keyid*/,
- CKA_DECRYPT/*op*/,
+ CKF_DECRYPT/*op*/,
CKF_ENCRYPT/*attr*/,
NULL);
if (new_symmetric_key) {

--
389 commits mailing list
389-commits@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-commits