tests/wrap_tpm_key.sh

#!/bin/bash


##
# The Intel tss currently fails with the null seed, so skip the test
#
# see https://github.com/intel/tpm2-tss/issues/1993
##
if [ "$TSSTYPE" = "Intel" ]; then
    TESTNULL=
else
    TESTNULL="-p null"
fi
##
# test is
# 1. Create an openssl private key
# 2. Wrap it to a TPM internal private key
# 3. get the corresponding public key from the engine
# 4. encode a message using the TPM key
# 5. verify the message through the public key
##
openssl genrsa 2048 > key1.priv || exit 1;
for parent in "" "-p 81000001" "-p owner" "${TESTNULL}" "-p platform" "-p endorsement"; do
    echo "Handle: ${parent}"
    ${bindir}/create_tpm2_key ${parent} -w key1.priv key1.tpm || exit 1
    openssl rsa $ENGINE $INFORM -in key1.tpm -pubout -out key1.pub || exit 1
    echo "This is another message" | openssl rsautl -sign $ENGINE $KEYFORM -inkey key1.tpm -out tmp.msg || exit 1
    openssl rsautl -verify -in tmp.msg -inkey key1.pub -pubin || exit 1
done

exit 0