From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: multipart/mixed; boundary="===============1333991948212960636==" MIME-Version: 1.0 From: Petr Gotthard Subject: [tpm2] tpm2-tss fapi tests failing with new openssl Date: Mon, 28 Jun 2021 11:55:27 +0200 Message-ID: <20210628115527.14115CA3@centrum.cz> List-ID: To: tpm2@lists.01.org --===============1333991948212960636== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Hello, =C2=A0 I have troubles debugging the FAPI tests. I am seeing error messages "Could= not open file or uri for loading certificate", but I have no idea where th= ese are coming from. For example, in "tpm2-tss/test/integration/fapi-data-c= rypt-rsa.log" I see =C2=A0 Could not open file or uri for loading certificate from /home/petr/projects= /tpm2-tss/test/integration/fapi-data-crypt-rsa.fint_ekcert.crt C05DA65E427F0000:error:80000002:system library:file_open:No such file or di= rectory::0:calling stat(/home/petr/projects/tpm2-tss/test/integration/fapi-= data-crypt-rsa.fint_ekcert.crt) Unable to load certificate Could not open file or uri for loading certificate from /home/petr/projects= /tpm2-tss/test/integration/fapi-data-crypt-rsa.fint_ekecccert.crt C08D22FEE77F0000:error:80000002:system library:file_open:No such file or di= rectory::0:calling stat(/home/petr/projects/tpm2-tss/test/integration/fapi-= data-crypt-rsa.fint_ekecccert.crt) Unable to load certificate cat: /home/petr/projects/tpm2-tss/test/integration/fapi-data-crypt-rsa.fint= _ekcert.crt: No such file or directory WARNING:test:test/helper/tpm_writeekcert.c:92:main() Cert input size is 0 WARNING:test:test/helper/tpm_writeekcert.c:95:main() Define NV cert with nv= index: 1c00002 cat: /home/petr/projects/tpm2-tss/test/integration/fapi-data-crypt-rsa.fint= _ekecccert.crt: No such file or directory WARNING:test:test/helper/tpm_writeekcert.c:92:main() Cert input size is 0 WARNING:test:test/helper/tpm_writeekcert.c:95:main() Define NV cert with nv= index: 1c0000a Execute the test script =C2=A0 The "tpm2-tss/test/integration/fapi-data-crypt-rsa.fint_ca.log" indicates(?= ) these files should(?) have been created: =C2=A0 Creating ekcert for /home/petr/projects/tpm2-tss/test/integration/fapi-data= -crypt-rsa.fint_ekpub.pem =3D> /home/petr/projects/tpm2-tss/test/integratio= n/fapi-data-crypt-rsa.fint_ekcert.crt Creating ekcert for /home/petr/projects/tpm2-tss/test/integration/fapi-data= -crypt-rsa.fint_ekeccpub.pem =3D> /home/petr/projects/tpm2-tss/test/integra= tion/fapi-data-crypt-rsa.fint_ekecccert.crt =C2=A0 But the certificates are not there. The PEM keys yes, the CRT files no. =C2=A0 I tried to find which openssl(?) command does this certificate creation, bu= t it is somewhere well hidden. =C2=A0 =C2=A0 This is not a bug in the tpm2-tss. I am using the new OpenSSL 3.0 and my he= avily modified tpm2-tss code. The bug is in one of these two-- I have just = serious troubles finding it. =C2=A0 Could you please give me some hint where should I look? Where is the comman= d generating these certificates, please? Kind Regards, Petr =C2=A0 --===============1333991948212960636==--