The IBMTSS2 tests suite creates signatures over SHA1 that may now fail on RHEL 9.x and CentOS 9. To have these tests succeed set OPENSSL_ENABLE_SHA1_SIGNATURES=1 so the tests do not need to be modified and also check that the TPM 2 can handle SHA1 signatures as before. 'swtpm socket --tpm2' should set this environment variable automatically if needed.
stefanberger
commented
3 weeks ago
The IBMTSS2 tests suite creates signatures over SHA1 that may now fail on RHEL 9.x and CentOS 9. To have these tests succeed set OPENSSL_ENABLE_SHA1_SIGNATURES=1 so the tests do not need to be modified and also check that the TPM 2 can handle SHA1 signatures as before. 'swtpm socket --tpm2' should set this environment variable automatically if needed.