This discussion is archived
3 Replies Latest reply: Mar 29, 2013 4:33 AM by user12820770 RSS

unexpected failure in ELF signature verification.

JulianG Newbie
Currently Being Moderated
Hi - hope someone can help me with some errors I'm seeing on one of our T4 servers after patching. This is a T4-1 server running a couple of non-global zones, after patching this server with Oracle's recommended patchset from a couple of weeks ago I keep seeing the following in the messages file:

Mar 15 07:48:20 tdukdbtestz01 kcfd[28034]: [ID 991991 user.error] kcfd: unable to find a certificate for DN: O=Oracle Corporation, OU=Corporate Object Signing, OU=Solaris Cryptographic Framework, CN=Solaris 10
Mar 15 07:48:20 tdukdbtestz01 kcfd[28034]: [ID 991991 user.error] kcfd: unable to find a certificate for DN: O=Oracle Corporation, OU=Corporate Object Signing, OU=Solaris Cryptographic Framework, CN=Solaris 10
Mar 15 07:48:20 tdukdbtestz01 sshd[3447]: [ID 978904 auth.error] libpkcs11: /usr/lib/security/pkcs11_kernel.so unexpected failure in ELF signature verification. See cryptoadm(1M). Skipping this plug-in.
Mar 15 07:48:20 tdukdbtestz01 kcfd[28034]: [ID 991991 user.error] kcfd: unable to find a certificate for DN: O=Oracle Corporation, OU=Corporate Object Signing, OU=Solaris Cryptographic Framework, CN=Solaris 10
Mar 15 07:48:20 tdukdbtestz01 sshd[3447]: [ID 360237 auth.error] libpkcs11: /usr/lib/security/pkcs11_softtoken.so unexpected failure in ELF signature verification. See cryptoadm(1M). Skipping this plug-in.
Mar 15 07:48:20 tdukdbtestz01 kcfd[28034]: [ID 991991 user.error] kcfd: unable to find a certificate for DN: O=Oracle Corporation, OU=Corporate Object Signing, OU=Solaris Cryptographic Framework, CN=Solaris 10
Mar 15 07:48:20 tdukdbtestz01 sshd[3446]: [ID 978904 auth.error] libpkcs11: /usr/lib/security/pkcs11_kernel.so unexpected failure in ELF signature verification. See cryptoadm(1M). Skipping this plug-in.
Mar 15 07:48:20 tdukdbtestz01 kcfd[28034]: [ID 991991 user.error] kcfd: unable to find a certificate for DN: O=Oracle Corporation, OU=Corporate Object Signing, OU=Solaris Cryptographic Framework, CN=Solaris 10
Mar 15 07:48:20 tdukdbtestz01 sshd[3446]: [ID 360237 auth.error] libpkcs11: /usr/lib/security/pkcs11_softtoken.so unexpected failure in ELF signature verification. See cryptoadm(1M). Skipping this plug-in.

This began to appear as soon as the server came back up after the reboot, these messages are being seen on both of the non-global zones that are running.

The global server is:
System Configuration: Oracle Corporation sun4v SPARC T4-1
Memory size: 65024 Megabytes
Generic_147147-26

NAME: Recommended OS Patchset Solaris 10 SPARC
DATE: 2013.02.14

Thanks - Julian.

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points