Patch Name: PHSS_25215

Patch Description: s700_800 11.04 VirtualVault 4.0 SpeedCard driver upgrade

Creation Date: 01/09/12

Post Date:  01/10/01

Hardware Platforms - OS Releases:
	s700: 11.04
	s800: 11.04

Products:
	VirtualVault A.04.00 US/Canada Release
	VirtualVault A.04.00 International Release

Filesets:
	C-FAST-RUN.FAST-RUN,fr=B.11.00.04,fa=HP-UX_B.11.00_32/64,v=HP

Automatic Reboot?: Yes

Status: General Release

Critical: No

Category Tags:
	defect_repair general_release

Path Name: /hp-ux_patches/s700_800/11.X/PHSS_25215

Symptoms:
	PHSS_25215:
	The following error is experienced on a iWS/NES 4.1 SP5
	webserver using an HP Speedcard together with client
	certificates with special public key size :

	Client-Auth reports:
	Error completing handshake: (-12201)
	SSL_ERROR_BAD_HANDSHAKE_HASH_VALUE

	Deconfiguring the Speedcard (i.e. using the iWS/NES
	builtin software SSL code) does not show the error,
	when used with the same client certificates.

	Refer to SR 8606219154 for more detail.

Defect Description:
	PHSS_25215:
	HP Speedcard doesn't work with client certificates with
	special public key size.

	Resolution:
	Resolved with an upgrade of the SpeedCard firmware.

SR:
	8606219154

Patch Files:
	
	C-FAST-RUN.FAST-RUN,fr=B.11.00.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	/usr/lib/libswift.sl
	/opt/cryptofast/04040002.csf

what(1) Output:
	
	C-FAST-RUN.FAST-RUN,fr=B.11.00.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	/usr/lib/libswift.sl:
		None

	C-FAST-RUN.FAST-RUN,fr=B.11.00.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	/opt/cryptofast/04040002.csf:
		None

cksum(1) Output:
	
	C-FAST-RUN.FAST-RUN,fr=B.11.00.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	3136670356 98772 /usr/lib/libswift.sl

	C-FAST-RUN.FAST-RUN,fr=B.11.00.04,fa=HP-UX_B.11.00_32/64,
		v=HP:
	4240982866 38912 /opt/cryptofast/04040002.csf

Patch Conflicts: None

Patch Dependencies: None

Hardware Dependencies: None

Other Dependencies: None

Supersedes: None

Equivalent Patches: None

Patch Package Size: 170 KBytes

Installation Instructions:
	Please review all instructions and the Hewlett-Packard
	SupportLine User Guide or your Hewlett-Packard support terms
	and conditions for precautions, scope of license,
	restrictions, and, limitation of liability and warranties,
	before installing this patch.
	------------------------------------------------------------
	1. Back up your system before installing a patch.

	2. Login as root.

	3. Copy the patch to the /tmp directory.

	4. Move to the /tmp directory and unshar the patch:

		cd /tmp
		sh PHSS_25215

	5. Run swinstall to install the patch:

		swinstall -x autoreboot=true -x patch_match_target=true \
			  -s /tmp/PHSS_25215.depot

	By default swinstall will archive the original software in 
	/var/adm/sw/save/PHSS_25215.  If you do not wish to retain a
	copy of the original software, use the patch_save_files option:

		swinstall -x autoreboot=true -x patch_match_target=true \
			  -x patch_save_files=false -s /tmp/PHSS_25215.depot

	WARNING: If patch_save_files is false when a patch is installed,
		 the patch cannot be deinstalled.  Please be careful
		 when using this feature.

	For future reference, the contents of the PHSS_25215.text file is 
	available in the product readme:

		swlist -l product -a readme -d @ /tmp/PHSS_25215.depot

	To put this patch on a magnetic tape and install from the
	tape drive, use the command:

		dd if=/tmp/PHSS_25215.depot of=/dev/rmt/0m bs=2k

Special Installation Instructions:
	This patch cannot be removed due to the SpeedCard
	firmware upgrade.