ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
New commits:
commit bc98362705bfef62e06d482b0f4622f2c48fda3b
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Thu Jul 10 13:54:35 2014 -0700
Ticket #47832 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with
improper macro
Description: attrcrypt_generate_key was passing an improper macro
CKA_DECRYPT, which is a super set of the correct one CKF_DECRYPT.
Thanks to Bob Relyea (rrelyea(a)redhat.com) for finding it out.
https://fedorahosted.org/389/ticket/47832
Reviewed by nhosoi(a)redhat.com.
diff --git a/ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c
b/ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c
index f4a5d1a..41856d5 100644
--- a/ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c
+++ b/ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c
@@ -344,7 +344,7 @@ attrcrypt_generate_key(attrcrypt_cipher_state *acs,PK11SymKey
**symmetric_key)
0 /*param*/,
acs->ace->key_size,
NULL /*keyid*/,
- CKA_DECRYPT/*op*/,
+ CKF_DECRYPT/*op*/,
CKF_ENCRYPT/*attr*/,
NULL);
if (new_symmetric_key) {