Add test to check certs can be pulled w/o pin

Signed-off-by: Simo Sorce <[email protected]>
latchset · Feb 10, 2025 · ecb173b · ecb173b
1 parent 25483ba
commit ecb173b
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/tests/tcerts b/tests/tcerts
@@ -43,4 +43,11 @@ if [[ ! ${DATA} =~ "Total found: 1" ]]; then
 fi
 done
 
+title PARA "Test fetching certificate without PIN in config files"
+ORIG_OPENSSL_CONF=${OPENSSL_CONF}
+sed "s/^pkcs11-module-token-pin.*$/##nopin/" "${OPENSSL_CONF}" > "${OPENSSL_CONF}.nopin"
+OPENSSL_CONF=${OPENSSL_CONF}.nopin
+ossl 'x509 -in $CRTURI -subject -out ${TMPPDIR}/crt-subj-nopin.txt'
+
+OPENSSL_CONF=${ORIG_OPENSSL_CONF}
 exit 0