Apply keycmp workaroud only for non-private keys

This allow to use private URIs w/o interference. Signed-off-by: Simo Sorce <simo@redhat.com>
latchset · Apr 15, 2024 · 4717802 · 4717802
1 parent a3c6ca1
commit 4717802
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tests/tcmpkeys.c b/tests/tcmpkeys.c
@@ -44,7 +44,7 @@ static EVP_PKEY *load_key(const char *uri)
         exit(EXIT_FAILURE);
     }
 
-    if (strncmp(uri, "pkcs11:", 7)) {
+    if (strncmp(uri, "pkcs11:", 7) && strstr(uri, "type=private") == NULL) {
         /* This is a workaround for OpenSSL < 3.2.0 where the code fails
          * to correctly source public keys unless explicitly requested
          * via an expect hint */