3 Replies Latest reply: Mar 29, 2013 6:33 AM by User12820770-Oracle RSS

    unexpected failure in ELF signature verification.

    JulianG
      Hi - hope someone can help me with some errors I'm seeing on one of our T4 servers after patching. This is a T4-1 server running a couple of non-global zones, after patching this server with Oracle's recommended patchset from a couple of weeks ago I keep seeing the following in the messages file:

      Mar 15 07:48:20 tdukdbtestz01 kcfd[28034]: [ID 991991 user.error] kcfd: unable to find a certificate for DN: O=Oracle Corporation, OU=Corporate Object Signing, OU=Solaris Cryptographic Framework, CN=Solaris 10
      Mar 15 07:48:20 tdukdbtestz01 kcfd[28034]: [ID 991991 user.error] kcfd: unable to find a certificate for DN: O=Oracle Corporation, OU=Corporate Object Signing, OU=Solaris Cryptographic Framework, CN=Solaris 10
      Mar 15 07:48:20 tdukdbtestz01 sshd[3447]: [ID 978904 auth.error] libpkcs11: /usr/lib/security/pkcs11_kernel.so unexpected failure in ELF signature verification. See cryptoadm(1M). Skipping this plug-in.
      Mar 15 07:48:20 tdukdbtestz01 kcfd[28034]: [ID 991991 user.error] kcfd: unable to find a certificate for DN: O=Oracle Corporation, OU=Corporate Object Signing, OU=Solaris Cryptographic Framework, CN=Solaris 10
      Mar 15 07:48:20 tdukdbtestz01 sshd[3447]: [ID 360237 auth.error] libpkcs11: /usr/lib/security/pkcs11_softtoken.so unexpected failure in ELF signature verification. See cryptoadm(1M). Skipping this plug-in.
      Mar 15 07:48:20 tdukdbtestz01 kcfd[28034]: [ID 991991 user.error] kcfd: unable to find a certificate for DN: O=Oracle Corporation, OU=Corporate Object Signing, OU=Solaris Cryptographic Framework, CN=Solaris 10
      Mar 15 07:48:20 tdukdbtestz01 sshd[3446]: [ID 978904 auth.error] libpkcs11: /usr/lib/security/pkcs11_kernel.so unexpected failure in ELF signature verification. See cryptoadm(1M). Skipping this plug-in.
      Mar 15 07:48:20 tdukdbtestz01 kcfd[28034]: [ID 991991 user.error] kcfd: unable to find a certificate for DN: O=Oracle Corporation, OU=Corporate Object Signing, OU=Solaris Cryptographic Framework, CN=Solaris 10
      Mar 15 07:48:20 tdukdbtestz01 sshd[3446]: [ID 360237 auth.error] libpkcs11: /usr/lib/security/pkcs11_softtoken.so unexpected failure in ELF signature verification. See cryptoadm(1M). Skipping this plug-in.

      This began to appear as soon as the server came back up after the reboot, these messages are being seen on both of the non-global zones that are running.

      The global server is:
      System Configuration: Oracle Corporation sun4v SPARC T4-1
      Memory size: 65024 Megabytes
      Generic_147147-26

      NAME: Recommended OS Patchset Solaris 10 SPARC
      DATE: 2013.02.14

      Thanks - Julian.