Matthijs Mekking 0af8bbd49b Create keys with pkcs11-tool --id ... The keyfromlabel system ECDSA tests sometimes fail. When this happens the ZSK and KSK key id values differ by 1, which is an indication that the same key is used for both DNSKEY records. When the private key is retrieved with 'ENGINE_load_private_key()', the public key is already set. But sometimes that key differs from the key which was retrieved with 'ENGINE_load_public_key()'. The libp11 source code uses id to find the key and without IDs all the keys are "equal", so it is returning the first key in the array of the enumerated keys instead of the matching key. In our test we didn't use '--id', just '--label'. With this change, the system test should no longer fail intermittently. Note this is only an issue for ECDSA keys, not RSA keys.		2022-01-27 10:49:47 +01:00
..
clean.sh	Add system test for dnssec-keyfromlabel	2022-01-27 10:49:46 +01:00
prereq.sh	Add system test for dnssec-keyfromlabel	2022-01-27 10:49:46 +01:00
setup.sh	Add system test for dnssec-keyfromlabel	2022-01-27 10:49:46 +01:00
template.db.in	Add system test for dnssec-keyfromlabel	2022-01-27 10:49:46 +01:00
tests.sh	Create keys with pkcs11-tool --id	2022-01-27 10:49:47 +01:00