TCTI configuration via openssl.cnf

[mccarey]

Hello,

I wanted to use openssl.cnf to configure the tcti parameter. But the parameter was not considered when I tried to use the tpm2 provider. I updated the OSSL_PARAM_utf8_ptr call in tpm2_provider.c and the parameter now is used. I can switch from /dev/tpm0 to /dev/tpmrm0 and vice versa just by changing the value in the openssl.cnf configuration file.

Here is the change in tpm2_provider.c:

• OSSL_PARAM_utf8_ptr(TPM2_PROV_PARAM_TCTI, &tcti_nameconf, 0)
• Instead of OSSL_PARAM_utf8_ptr(TPM2_PROV_PARAM_TCTI, tcti_nameconf, 0)

Please can you check if this is the right way.
Also, it seems that, by default, /dev/tpmrm0 is now used.
Can you confirm ? if yes, maybe the doc needs to be updated as well.

(I used the master branch)
Thank you