tests: Add a pkcs11-certificate test case#640
Merged
Conversation
Contributor
Author
One more change: Now they should run with all the other command line tests. |
stefanberger
force-pushed
the
pkcs11_cert_test
branch
7 times, most recently
from
3df1b21 to
3f8a4da
Compare
Some PKCS sigstore#11 modules are not in the expected paths of /usr/lib64/pkcs11 or /usr/lib/pkcs11. An example is the SoftHSM2 module that is in /usr/lib/softhsm/ on Ubuntu and other distros. Therefore, add an option --module_paths to the CLI to be able to use SoftHSM2 it in CLI tests cases. Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
If the openssl command line tool is available then create a CA and sign the HSM's public key with it and then test signing and verifying with pkcs11-certificate method. Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Since the Ubuntu SoftHSM2 PKCS sigstore#11 module is outside the default paths its path must be provided using the --module-paths command line option. Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Run the pkcs11 tests with all the other command line tests. Adjust the path to the softhsm_setup script where necessary. Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
stefanberger
force-pushed
the
pkcs11_cert_test
branch
from
3f8a4da to
03956af
Compare
SequeI
approved these changes
Jun 15, 2026
mihaimaruseac
approved these changes
Jun 17, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Since the PKCS #11 module for SoftHSM is outside the default pkcs11 module paths, add an option --module-paths to the CLI tool for passing the paths to PKCS #11 modules and use it in test cases since on Ubuntu the module is located in /usr/lib/softhsm.
If the openssl command line tool is available then create a CA and sign the HSM's public key with it and then test signing and verifying with the pkcs11-certificate method.
Summary
Checklist