Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-8307

CryptoTokenData: P11CryptoToken row entry touched/updated without need

    Details

    • Issue discovered during:
      Customer
    • Sprint:
      EJBCA Team Alice - 2019 w31

      Description

      I'm sure Johan Eklund will help me out with this one and jump in if I say something stupid.

      So, when we tried to understand MONT-2588 on the Appliance ("Clustering: EJBCA CryptoTokenManager: Generating a key deactivates the Token on other nodes") we found that for some reason, when we generate a Key on a P11-backed CryptoToken, then the according table row get's an unnecessary update, just "rowVersion" and "lastUpdate" get updated, although none of the other columns gets updated. tokenData is empty in case of a hard token. tokenProps showed unmodified.

      This leads to the fact that this CryptoToken shows deactivated on the other nodes of this cluster (database is master-master synched in Appliance Cluster), which is confusing all by itself.
      Perhaps (I did not go as far as test that) even the according CAs are offline.
      In the later course, if a customer tries to activate that CryptoToken back again, he might find that he can activate the CryptoToken without having to enter the (correct) Authentication Code and without having to enter the smart cards which always raises questions about "the security".

      I have no knowledge about the code and no idea how explicitly or implicitly this happens through the persistence layer, but it would be really good if the row would not be touched unnecessarily, as in the case of the Appliance.

        Attachments

          Activity

            People

            Assignee:
            tomas Tomas Gustavsson
            Reporter:
            manueld Manuel Dejonghe
            Verified by:
            Samuel Lidén Borell
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 1 hour Original Estimate - 1 hour
                1h
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 hour, 25 minutes
                1h 25m