Since the support for keyrings was added for keytoc the parsing of
pkcs11 keydescriptions that are set from environment variables is
broken. Fix this by adding the necessary try_resolve_env call before
working with the key description.

Fixes: 9b6abf4928 ("crypto: Add support for keyrings")
Signed-off-by: Michael Grzeschik <[email protected]>
---
 scripts/keytoc.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/keytoc.c b/scripts/keytoc.c
index 
ade924298a3169c6ac52b781deac94f706a14203..77ada3af451983722f40e5bb40f8e2789884a898
 100644
--- a/scripts/keytoc.c
+++ b/scripts/keytoc.c
@@ -856,7 +856,7 @@ int main(int argc, char *argv[])
        keylist = calloc(sizeof(struct keyinfo), keycount);
 
        for (i = 0; i < keycount; i++) {
-               const char *keyspec = argv[optind + i];
+               const char *keyspec = try_resolve_env(argv[optind + i]);
                struct keyinfo *info = &keylist[i];
 
                if (!keyspec)

---
base-commit: 5d89bec4985d850d59813e34c6b5213d8e8f48f0
change-id: 20251128-keytoc-aaade89fe842

Best regards,
-- 
Michael Grzeschik <[email protected]>


Reply via email to