Comment 15 for bug 1968131

Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

A new interim summary

Problem:
- debian/patches/openssl-not-certtool.patch adds "RANDFILE = $ENV::HOME/.rnd\n"
- this is not picked up correctly at the time this file is evaluated
- Due to that swtpm-localca tries to access $CWD/.rnd and fails in most cases
- The upstreaming of this Delta has further open questions at [1]

Solution:
- We could brute force:
  "RANDFILE = /var/lib/swtpm/.rnd\n"
  But that is wrong if swtpm-localca is executed by another
  user that might fail just as much.
- We need to find either a working pick up of $HOME or something completely else ...
  Maybe we can make samples/swtpm_localca.c read ENV[HOME] and write the config
  accordingly

[1]: https://github.com/stefanberger/swtpm/pull/620