Bugzilla Bug 336509: put the FIPS token in the Error state only when the
continuous RNG test fails. git-svn-id: svn://10.0.0.236/trunk@206178 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
@@ -1537,8 +1537,10 @@ sftk_GenerateSecretCKA_ID(NSSLOWKEYDBHandle *handle, SECItem *id, char *label)
|
||||
(++retries <= SFTK_KEY_MAX_RETRIES));
|
||||
|
||||
if ((rv != SECSuccess) || (retries > SFTK_KEY_MAX_RETRIES)) {
|
||||
if (rv != SECSuccess) {
|
||||
sftk_fatalError = PR_TRUE;
|
||||
}
|
||||
crv = CKR_DEVICE_ERROR; /* random number generator is bad */
|
||||
sftk_fatalError = PR_TRUE;
|
||||
PORT_Free(id->data);
|
||||
id->data = NULL;
|
||||
id->len = 0;
|
||||
|
||||
Reference in New Issue
Block a user