From e642d220e146d0c2b70805ebe6b499fc60eb5baa Mon Sep 17 00:00:00 2001 From: Stefan Berger Date: Thu, 30 Jul 2026 14:09:28 -0400 Subject: [PATCH] test: Use a config file for pkcs11 module given by OCICRYPT_CONFIG rather than 'internal' Rather than using the 'internal' shortcut for the OCICRYPT_CONFIG for pkcs11, use an actual config file. Signed-off-by: Stefan Berger --- script/tests/test_encryption.sh | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/script/tests/test_encryption.sh b/script/tests/test_encryption.sh index b569fd55..5b4aefd7 100755 --- a/script/tests/test_encryption.sh +++ b/script/tests/test_encryption.sh @@ -1051,7 +1051,18 @@ setupPKCS11() { # Env. variable for softhsm_setup export SOFTHSM_SETUP_CONFIGDIR=${WORKDIR} # Env. variable for ctr-enc - export OCICRYPT_CONFIG=internal + export OCICRYPT_CONFIG=${WORKDIR}/pkcs11-conf.yaml + cat <<_EOF_ >${OCICRYPT_CONFIG} +pkcs11: + module-directories: + - /usr/lib64/pkcs11/ + - /usr/lib/pkcs11/ + - /usr/lib/softhsm/ + allowed-module-paths: + - /usr/lib64/pkcs11/ + - /usr/lib/pkcs11/ + - /usr/lib/softhsm/ +_EOF_ SOFTHSM_KEY=${WORKDIR}/softhsm_key.yaml output=$(${SOFTHSM_SETUP} setup 2>&1)