[Bug 1207940] New: [Build 20230205] openssl-3: tpm unable to enable public key encoding
http://bugzilla.opensuse.org/show_bug.cgi?id=1207940 Bug ID: 1207940 Summary: [Build 20230205] openssl-3: tpm unable to enable public key encoding Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/3101026/modules/tpm2 _engine_ecdsa_operation/steps/15 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs@suse.de Reporter: dimstar@opensuse.org QA Contact: qa-bugs@suse.de Found By: openQA Blocker: Yes ## Observation With the switch to openssl-3, the tpm tests started failing in openQA: # Test died: command 'openssl ec -engine tpm2tss -inform engine -in mykey -pubout -outform pem -out mykey.pub' failed at /usr/lib/os-autoinst/autotest.pm line 387. # Result: Engine "tpm2tss" set. read EC key unable to enable public key encoding 40576458237F0000:error:030000A3:digital envelope routines:EVP_PKEY_set_params:invalid key:crypto/evp/p_lib.c:2353: XHqhV-1- ## openQA references openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-security_tpm2_swtpm@64bit fails in [tpm2_engine_ecdsa_operation](https://openqa.opensuse.org/tests/3101026/modules/tpm2_engine_ecdsa_operatio...) ## Test suite description The base test suite is used for job templates defined in YAML documents. It has no settings of its own. ## Reproducible Fails since (at least) Build [20230205](https://openqa.opensuse.org/tests/3101026) (current job) ## Expected result Last good: [20230201](https://openqa.opensuse.org/tests/3089306) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=security_tpm2_swtpm&version=Tumbleweed) -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1207940 Dominique Leuenberger <dimstar@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|screening-team-bugs@suse.de |pmonrealgonzalez@suse.com -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1207940 http://bugzilla.opensuse.org/show_bug.cgi?id=1207940#c3 --- Comment #3 from Dominique Leuenberger <dimstar@opensuse.org> --- (In reply to Pedro Monreal Gonzalez from comment #1)
I have submitted the recently released update to version 1.2.0, just in case this is solved upstream, here: * https://build.opensuse.org/request/show/1063432
This has been in TW for a few days now, but the openQA tests still fail the same, so we can conclude it did not help -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1207940 http://bugzilla.opensuse.org/show_bug.cgi?id=1207940#c4 --- Comment #4 from Dominique Leuenberger <dimstar@opensuse.org> --- Simarizing what the test does: tpm2tss-genkey -a ecdsa -s 2048 mykey openssl ec -engine tpm2tss -inform engine -in mykey -pubout -outform pem -out mykey.pub the 2nd command fails with: Engine "tpm2tss" set. read EC key unable to enable public key encoding 4027EA812D7F0000:error:030000A3:digital envelope routines:EVP_PKEY_set_params:invalid key:crypto/evp/p_lib.c:2353: -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠suse.com