Add CKA_DERIVE flag in server's private key template

This commit adds CKA_DERIVE flag in server's private key template which is required by optee subsystem. Tested TLS1.2 with the change. Signed-off-by: Kshitiz Varshney <[email protected]>
latchset · Aug 20, 2024 · dd0346e · dd0346e
1 parent f29b679
commit dd0346e
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/keymgmt.c b/src/keymgmt.c
@@ -1289,6 +1289,7 @@ static void *p11prov_ec_gen(void *genctx, OSSL_CALLBACK *cb_fn, void *cb_arg)
 #define EC_PRIVKEY_TMPL_SIZE 5
     CK_ATTRIBUTE privkey_template[EC_PRIVKEY_TMPL_SIZE + COMMON_TMPL_SIZE] = {
         { CKA_TOKEN, DISCARD_CONST(&val_true), sizeof(CK_BBOOL) },
+        { CKA_DERIVE, DISCARD_CONST(&val_true), sizeof(CK_BBOOL) },
         { CKA_PRIVATE, DISCARD_CONST(&val_true), sizeof(CK_BBOOL) },
         { CKA_SENSITIVE, DISCARD_CONST(&val_true), sizeof(CK_BBOOL) },
         { CKA_SIGN, DISCARD_CONST(&val_true), sizeof(CK_BBOOL) },