Handle certool need for der encoded CKA_EC_POINT

Signed-off-by: Simo Sorce <[email protected]>
simo5 · Nov 26, 2024 · f5e832e · f5e832e
1 parent f6c1a9a
commit f5e832e
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/tests/kryoptic-init.sh b/tests/kryoptic-init.sh
@@ -42,3 +42,7 @@ pkcs11-tool --module "${P11LIB}" --so-pin "${PINVALUE}" \
 export TOKENCONFIGVARS="export KRYOPTIC_CONF=$TOKDIR/kryoptic.sql"
 
 export TESTPORT="34000"
+
+# Older versions of certtool do not support non-DER encoded CKA_EC_POINT
+# so set the kryoptic env var to enforce compatibility for the setup phase
+export KRYOPTIC_EC_POINT_ENCODING="DER"