Stefan, On Tue, Apr 27, 2021 at 03:31:32PM -0400, Stefan Berger wrote: > Since the new API call is not used by evmctl, implement a test program > 'create_ima_signature' to use it. Extend _evmctl_sign to also created > IMA v2 signatures with RSA keys using this test program and compare the > results. > > Evmctl's signature creation path is unmodified at this point, so the tests > ensure that the existing sign_hash_v2 and the new sign_hash_v2_pkey create > identical (RSA) signatures. > > Signed-off-by: Stefan Berger <stefanb@xxxxxxxxxxxxx> > --- > tests/Makefile.am | 6 ++ > tests/create_ima_signature.c | 111 +++++++++++++++++++++++++++++++++++ Why not add this to evmctl? Thanks, > tests/sign_verify.test | 21 ++++++- > 3 files changed, 136 insertions(+), 2 deletions(-) > create mode 100644 tests/create_ima_signature.c