ampel/zlevis
2
1
Fork 0
Code Issues Pull requests Releases 7 Wiki Activity

src/zlevis-decrypt: update

Browse source 
Silenced tpm2_unseal error when TPM is empty.
This commit is contained in:
Luc Bijl 2025-07-31 13:48:59 +02:00
parent 8bf01a4a03
commit 4a3b0583c4
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/zlevis-decrypt
View file

@ -122,7 +122,7 @@ rm -f "$tmp_jwk_pub" "$tmp_jwk_priv" "$tmp_primary_context"
# Unseal the JWK from the TPM
case "$tpm2tools_version" in
4|5) jwk="$(tpm2_unseal -c "$tmp_load_context" ${pcr_spec:+-p pcr:$pcr_spec})" || fail=$?;;
4|5) jwk="$(tpm2_unseal -c "$tmp_load_context" ${pcr_spec:+-p pcr:$pcr_spec} 2>/dev/null)" || fail=$?;;
*) fail=1;;
esac
if [ -n "$fail" ]; then
@ -138,4 +138,4 @@ rm -f "$tmp_load_context"
(echo "$jwk$hdr."; /bin/cat) | jose jwe dec -k- -i-
# Exit with the status of the last command
exit $?
exit $?