Infrastructure Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

unexpected failure in ELF signature verification.

JulianGMar 15 2013 — edited Mar 29 2013

Hi - hope someone can help me with some errors I'm seeing on one of our T4 servers after patching. This is a T4-1 server running a couple of non-global zones, after patching this server with Oracle's recommended patchset from a couple of weeks ago I keep seeing the following in the messages file:

Mar 15 07:48:20 tdukdbtestz01 kcfd[28034]: [ID 991991 user.error] kcfd: unable to find a certificate for DN: O=Oracle Corporation, OU=Corporate Object Signing, OU=Solaris Cryptographic Framework, CN=Solaris 10
Mar 15 07:48:20 tdukdbtestz01 kcfd[28034]: [ID 991991 user.error] kcfd: unable to find a certificate for DN: O=Oracle Corporation, OU=Corporate Object Signing, OU=Solaris Cryptographic Framework, CN=Solaris 10
Mar 15 07:48:20 tdukdbtestz01 sshd[3447]: [ID 978904 auth.error] libpkcs11: /usr/lib/security/pkcs11_kernel.so unexpected failure in ELF signature verification. See cryptoadm(1M). Skipping this plug-in.
Mar 15 07:48:20 tdukdbtestz01 kcfd[28034]: [ID 991991 user.error] kcfd: unable to find a certificate for DN: O=Oracle Corporation, OU=Corporate Object Signing, OU=Solaris Cryptographic Framework, CN=Solaris 10
Mar 15 07:48:20 tdukdbtestz01 sshd[3447]: [ID 360237 auth.error] libpkcs11: /usr/lib/security/pkcs11_softtoken.so unexpected failure in ELF signature verification. See cryptoadm(1M). Skipping this plug-in.
Mar 15 07:48:20 tdukdbtestz01 kcfd[28034]: [ID 991991 user.error] kcfd: unable to find a certificate for DN: O=Oracle Corporation, OU=Corporate Object Signing, OU=Solaris Cryptographic Framework, CN=Solaris 10
Mar 15 07:48:20 tdukdbtestz01 sshd[3446]: [ID 978904 auth.error] libpkcs11: /usr/lib/security/pkcs11_kernel.so unexpected failure in ELF signature verification. See cryptoadm(1M). Skipping this plug-in.
Mar 15 07:48:20 tdukdbtestz01 kcfd[28034]: [ID 991991 user.error] kcfd: unable to find a certificate for DN: O=Oracle Corporation, OU=Corporate Object Signing, OU=Solaris Cryptographic Framework, CN=Solaris 10
Mar 15 07:48:20 tdukdbtestz01 sshd[3446]: [ID 360237 auth.error] libpkcs11: /usr/lib/security/pkcs11_softtoken.so unexpected failure in ELF signature verification. See cryptoadm(1M). Skipping this plug-in.

This began to appear as soon as the server came back up after the reboot, these messages are being seen on both of the non-global zones that are running.

The global server is:
System Configuration: Oracle Corporation sun4v SPARC T4-1
Memory size: 65024 Megabytes
Generic_147147-26

NAME: Recommended OS Patchset Solaris 10 SPARC
DATE: 2013.02.14

Thanks - Julian.

Locked Post

New comments cannot be posted to this locked post.

Locked on Apr 26 2013

Added on Mar 15 2013

#oracle-solaris, #solaris-10

3 comments

2,968 views