Description of problem:

Create RSA and ECC key pairs in PEM format using openssl
Convert key pair to plaintext DER format
Load the RSA openssl key pair in the NULL hierarchy 80000001 - sha1
 ERROR:
convertRsaDerToKeyPair: could not convert key to RSA
loadexternal: failed, rc 00000084
TPM_RC_VALUE - value is out of range or is not correct for the context Handle number unspecified
/var/str/tss /var/str
/var/str


TPM_RC convertRsaDerToKeyPair(TPM2B_PUBLIC 		*objectPublic,
			      TPM2B_SENSITIVE 		*objectSensitive,
			      int			keyType,
			      TPMI_ALG_SIG_SCHEME 	scheme,
			      TPMI_ALG_HASH 		nalg,
			      TPMI_ALG_HASH		halg,
			      const char		*derKeyFilename,
			      const char 		*password)
{
    TPM_RC		rc = 0;
    RSA 		*rsaKey = NULL;
    unsigned char	*derBuffer = NULL;
    size_t		derSize;

    /* read the DER file */
    if (rc == 0) {
	rc = TSS_File_ReadBinaryFile(&derBuffer,     	/* freed @1 */
				     &derSize,
				     derKeyFilename); 
    }
    if (rc == 0) {
	const unsigned char *tmpPtr = derBuffer;	/* because pointer moves */
>>>	rsaKey = d2i_RSAPrivateKey(NULL, &tmpPtr, (long)derSize);	/* freed @2 */
	if (rsaKey == NULL) {
	    printf("convertRsaDerToKeyPair: could not convert key to RSA\n");
	    rc = TPM_RC_VALUE;
	}
    }
    if (rc == 0) {
	rc = convertRsaKeyToPrivate(NULL,		/* TPM2B_PRIVATE */
				    objectSensitive,	/* TPM2B_SENSITIVE */
				    rsaKey,
				    password);	
    }	
    if (rc == 0) {
	rc = convertRsaKeyToPublic(objectPublic,
				   keyType,
				   scheme,
				   nalg,
				   halg,
				   rsaKey);
    }
    free(derBuffer);			/* @1 */
    TSS_RsaFree(rsaKey);		/* @2 */
    return rc;
}




Version-Release number of selected component (if applicable):


How reproducible: Reproduces every run of gating test. So 1minutetip rhel9 should trigger it. You can also look at the specific failing test in utils/regtests/testsalt.sh.


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info: