Bugzilla Bug 336509: put the FIPS token in the Error state only when the

continuous RNG test fails.


git-svn-id: svn://10.0.0.236/trunk@206178 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
wtchang%redhat.com
2006-07-31 18:31:07 +00:00
parent d308f37480
commit 1e048e0321

View File

@@ -1537,8 +1537,10 @@ sftk_GenerateSecretCKA_ID(NSSLOWKEYDBHandle *handle, SECItem *id, char *label)
(++retries <= SFTK_KEY_MAX_RETRIES));
if ((rv != SECSuccess) || (retries > SFTK_KEY_MAX_RETRIES)) {
if (rv != SECSuccess) {
sftk_fatalError = PR_TRUE;
}
crv = CKR_DEVICE_ERROR; /* random number generator is bad */
sftk_fatalError = PR_TRUE;
PORT_Free(id->data);
id->data = NULL;
id->len = 0;