From: Stefan Berger <stefanb@linux.ibm.com>
To: linux-integrity@vger.kernel.org
Cc: zohar@linux.ibm.com, roberto.sassu@huawei.com,
Stefan Berger <stefanb@linux.ibm.com>
Subject: [ima-evm-utils PATCH 1/2] evmctl: Replace OSS_PROVIDER_load with OSSL_PROVIDER_try_load (Ubuntu)
Date: Tue, 14 May 2024 14:22:59 -0400 [thread overview]
Message-ID: <20240514182300.92440-2-stefanb@linux.ibm.com> (raw)
In-Reply-To: <20240514182300.92440-1-stefanb@linux.ibm.com>
To avoid the following type of issue replace OSSL_PROVIDER_load with
OSSL_PROVIDER_try_load():
+ evmctl --engine gost ima_sign --keyid=aabbccdd --provider pkcs11 \
--sigfile --hashalgo sha256 \
--key pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;... \
--xattr-user pkcs11test
evmctl ima_sign failed with (1)
EVP_DigestInit() failed
openssl: error:0308010C:digital envelope routines::unsupported
openssl: error:03000086:digital envelope routines::initialization error
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
---
src/evmctl.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/evmctl.c b/src/evmctl.c
index ffe2fc9..3ebda6f 100644
--- a/src/evmctl.c
+++ b/src/evmctl.c
@@ -3049,7 +3049,7 @@ static char *get_password(void)
#if CONFIG_IMA_EVM_PROVIDER
static OSSL_PROVIDER *setup_provider(const char *name)
{
- OSSL_PROVIDER *p = OSSL_PROVIDER_load(NULL, name);
+ OSSL_PROVIDER *p = OSSL_PROVIDER_try_load(NULL, name, 1);
if (!p) {
log_err("provider %s isn't available\n", optarg);
--
2.45.0
next prev parent reply other threads:[~2024-05-14 18:23 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-05-14 18:22 [ima-evm-utils PATCH 0/2] Fix issue with tests and provider on Ubuntu 24.04 Stefan Berger
2024-05-14 18:22 ` Stefan Berger [this message]
2024-05-14 18:23 ` [ima-evm-utils PATCH 2/2] tests: Use EVMCTL_ENGINE to set engine or provider for test case Stefan Berger
2024-05-15 11:38 ` [ima-evm-utils PATCH 0/2] Fix issue with tests and provider on Ubuntu 24.04 Mimi Zohar
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20240514182300.92440-2-stefanb@linux.ibm.com \
--to=stefanb@linux.ibm.com \
--cc=linux-integrity@vger.kernel.org \
--cc=roberto.sassu@huawei.com \
--cc=zohar@linux.ibm.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.