Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

test/rsa_genpkey_x509_csr.sh fails on latest Fedora rawhide #105

Open
afreof opened this issue Feb 12, 2024 · 0 comments
Open

test/rsa_genpkey_x509_csr.sh fails on latest Fedora rawhide #105

afreof opened this issue Feb 12, 2024 · 0 comments

Comments

@afreof
Copy link
Contributor

afreof commented Feb 12, 2024

The recently added test case 1e097de fails on Fedora Rawhide.

How to reproduce:

cp test/Containerfiles/Containerfile.fedora-38 test/Containerfiles/Containerfile.fedora-rawhide
TEST_CONTAINER=fedora-rawhide
podman build -f "test/Containerfiles/Containerfile.$TEST_CONTAINER" --tag "tpm2-openssl-build-$TEST_CONTAINER"
podman run -it --name tpm2-openssl-1 -v "$(pwd):/build:Z" --rm --userns=keep-id \
       "localhost/tpm2-openssl-build-$TEST_CONTAINER" /bin/bash


cat /build/test-suite.log
======================================================
   tpm2-openssl 1.2.0-12-ge4bd383: ./test-suite.log
======================================================

# TOTAL: 46
# PASS:  45
# SKIP:  0
# XFAIL: 0
# FAIL:  1
# XPASS: 0
# ERROR: 0

.. contents:: :depth: 2

FAIL: test/rsa_genpkey_x509_csr
===============================

Starting /build/test/rsa_genpkey_x509_csr.sh
+ openssl genpkey -provider tpm2 -algorithm RSA -pkeyopt bits:2048 -out rootca.key
..+...+......+.+.....+....+..+...+.+...+...........+.......+...+.....+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*..+.+...........+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*..+.........+...+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
...+...+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*.....+......+.+........+......+.+.....+...+...+...+.+...+.....+.............+.....+...+.......+.....+....+........+......+.......+..+.......+...+..+.........+......+...+.......+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*..........+...+...+....+...+.........+...+..+.+........+....+...............+......+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ openssl req -provider tpm2 -provider default -propquery '?provider=tpm2' -x509 -new -key rootca.key -subj '/CN=My CA/C=TH/ST=Phuket/L=Phuket/O=Example' -out rootca.crt
WARNING:esys:src/tss2-esys/api/Esys_Sign.c:311:Esys_Sign_Finish() Received TPM Error 
ERROR:esys:src/tss2-esys/api/Esys_Sign.c:105:Esys_Sign() Esys Finish ErrorCode (0x0000012f) 
003E19A2D77F0000:error:4080000F:tpm2::cannot sign::-1:303 tpm:error(2.0): authValue or authPolicy is not available for selected entity
003E19A2D77F0000:error:06880006:asn1 encoding routines:ASN1_item_sign_ctx:EVP lib:crypto/asn1/a_sign.c:284:
FAIL test/rsa_genpkey_x509_csr.sh (exit status: 1)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant