1675523 - Incorrect pkcs11t.h value CKR_PUBLIC_KEY_INVALID

Status: RESOLVED FIXED

(NSS :: Libraries, defect, P1)

Description

[Alexander Scheel]

User Agent: Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0

Steps to reproduce:

Compared CKR_PUBLIC_KEY_INVALID between NSS's pkcs11t.h value and PKCS#11 v2.40's spec version and jdk8u's version.

Luckily CKR_PUBLIC_KEY_INVALID appears unused in NSS's codebase.

Actual results:

NSS's value was incorrect and differed from the latter two.

lib/util/pkcs11t.h:1463:#define CKR_PUBLIC_KEY_INVALID 0x000001B

(This is the value of CKR_ACTION_PROHIBITED).

Expected results:

NSS's value should be corrected.

PKCS#11 v2.40:
https://www.cryptsoft.com/pkcs11doc/STANDARD/include/v240/pkcs11t.h line 1150

jdk8u:
https://hg.openjdk.java.net/jdk8u/jdk8u/jdk/file/eb7f437285a1/src/share/native/sun/security/pkcs11/wrapper/pkcs11t.h#l1155

Comment 1

[Kevin Jacobs [:kjacobs]]

Thanks Alex. For triage purposes, do you intend to submit a patch for this?

Comment 2

[Alexander Scheel]

Not this time. :-) Easier for someone closer to the project to do it than I. Not impacting JSS; just happened to notice it in a comparison test.

Comment 3

[J.C. Jones [:jcj] (he/him)]

Attachment: Bug 1675523 - CKR_PUBLIC_KEY_INVALID has an incorrect value

PKCS#11 v2.40:
https://www.cryptsoft.com/pkcs11doc/STANDARD/include/v240/pkcs11t.h line 1150

jdk8u:
https://hg.openjdk.java.net/jdk8u/jdk8u/jdk/file/eb7f437285a1/src/share/native/sun/security/pkcs11/wrapper/pkcs11t.h#l1155

Comment 4

[Kevin Jacobs [:kjacobs]]

https://hg.mozilla.org/projects/nss/rev/f9bcf45ca3bff737adafe2c6521aebdd8c4f2f51