diff --git a/tests/tcmpkeys.c b/tests/tcmpkeys.c index 3f68633e..cee66977 100644 --- a/tests/tcmpkeys.c +++ b/tests/tcmpkeys.c @@ -45,7 +45,9 @@ static EVP_PKEY *load_key(const char *uri) } if (strncmp(uri, "pkcs11:", 7)) { - /* public file */ + /* This is a workaround for OpenSSL < 3.2.0 where the code fails + * to correctly source public keys unless explicitly requested + * via an expect hint */ if (OSSL_STORE_expect(store, OSSL_STORE_INFO_PUBKEY) != 1) { fprintf(stderr, "Failed to expect Public Key File\n"); exit(EXIT_FAILURE);