From ce5efed7cb660f62e08da950b340374f47c4136f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20Men=C5=A1=C3=ADk?= Date: Tue, 1 Apr 2025 14:25:14 +0200 Subject: [PATCH] Fetch URI of pkcs11 object to contain both objects Contain both type=private AND type=public object in URI provided by the test. Both are required for correct operation of provider. Fetch correct URI by using public object, then remove type=public part from the URI. --- Sanity/utils/pkcs11-tools/runtest.sh | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/Sanity/utils/pkcs11-tools/runtest.sh b/Sanity/utils/pkcs11-tools/runtest.sh index a1bea4a..e15d3ff 100755 --- a/Sanity/utils/pkcs11-tools/runtest.sh +++ b/Sanity/utils/pkcs11-tools/runtest.sh @@ -116,8 +116,10 @@ rlJournalStart rlRun "pkcs11-tool --module $SOFTHSM2_MODULE --pin $PIN --keypairgen --key-type RSA:2048 --label test-zsk" 0 "generate new pair" rlRun "pkcs11-tool --module $SOFTHSM2_MODULE --pin $PIN --keypairgen --key-type RSA:4096 --label test-ksk" 0 "generate new pair" rlRun "pkcs11-tool --module $SOFTHSM2_MODULE -O" 0 "check objects saved" - rlRun "ZSK_URI=\$(pkcs11-tool --module $SOFTHSM2_MODULE --pin $PIN -O --label test-zsk --type privkey | pkcs11_tool_object_uri)" 0 "Obtain slot zsk URI" - rlRun "KSK_URI=\$(pkcs11-tool --module $SOFTHSM2_MODULE --pin $PIN -O --label test-ksk --type privkey | pkcs11_tool_object_uri)" 0 "Obtain slot ksk URI" + rlRun "ZSK_URI=\$(pkcs11-tool --module $SOFTHSM2_MODULE -O --label test-zsk --type pubkey | pkcs11_tool_object_uri)" 0 "Obtain slot zsk URI" + rlRun "KSK_URI=\$(pkcs11-tool --module $SOFTHSM2_MODULE -O --label test-ksk --type pubkey | pkcs11_tool_object_uri)" 0 "Obtain slot ksk URI" + rlRun "ZSK_URI=\"${ZSK_URI%;type=public}\"" 0 "Remove public type from ZSK URI" + rlRun "KSK_URI=\"${KSK_URI%;type=public}\"" 0 "Remove public type from KSK URI" rlRun "test -n \"$ZSK_URI\"" 0 "Check URI were obtained" rlRun "test -n \"$KSK_URI\"" 0 "Check URI were obtained" rlRun "openssl pkey -in '$ZSK_URI?pin-source=$PIN_SOURCE' -check" 0,1 "Test OpenSSL knows the public ZSK key"