Description of problem:
When trying to add a data device to an encrypted stratis pool that has been created using the "stratis pool bind ... --trust-url" command, the command to add the data device fails.

Version-Release number of selected component (if applicable):
stratisd-2.4.2-3.el9.x86_64
stratis-cli-2.4.3-2.el9.noarch

How reproducible:
Appears to be 100% when reproduction steps are used; however, the problem only appears when the "--trust-url" option is used in the "stratis pool bind ..." command.


Steps to Reproduce:
On a test system with spare block devices /dev/nvme0n1p2 and /dev/nvme0n1p3,
and with stratisd, stratis-cli, and tang installed:
1. Execute "systemctl enable tangd.socket stratisd --now"
2. Create a keyfile, and run "stratis key set --keyfile-path <keyfile> key1"
3. Create a test pool called "spool1" via the following command:
   "stratis pool create spool1 /dev/nvme0n1p2 --key-desc key1"
4. Bind the pool to the local tang server instance:
   "stratis pool bind tang spool1 http://<local IP> --trust-url"
5. Attempt to add a second block device to the test pool:
   "stratis pool add-data spool1 /dev/nvme0n1p3"

Actual results:
Execution failed:
stratisd failed to perform the operation that you requested. It returned the following information via the D-Bus: ERROR: Error: Command failed: cmd: "/usr/bin/clevis" "luks" "bind" "-d" "<devnode>" "-k" "/run/stratisd/keyfiles/<tempdir>/key1" "-t" "2" "tang" "{\"url\":\"<url>\"}", exit reason: 1 stdout:  stderr: ...
The advertisement contains the following signing keys:

<SIGNING KEYS>
/usr/bin/clevis-encrypt-tang: line 120: /dev/tty: No such device or address
Invalid input!
Usage: jose jwe fmt -i JWE [-I CT] [-o JWE] [-O CT] [-c]

Converts a JWE between serialization formats

  -i JSON --input=JSON     Parse JWE from JSON
  -i FILE --input=FILE     Read JWE from FILE
  -i -    --input=-        Read JWE from standard input

  -I FILE --detached=FILE  Read decoded ciphertext from FILE
  -I -    --detached=-     Read decoded ciphertext from standard input

  -o JSON --output=JSON    Parse JWE from JSON
  -o FILE --output=FILE    Read JWE from FILE
  -o -    --output=-       Read JWE from standard input
                           Default: "-"

  -O JSON --detach=JSON    Parse JWE from JSON
  -O FILE --detach=FILE    Read JWE from FILE
  -O -    --detach=-       Read JWE from standard input

  -c      --compact        Output JWE using compact serialization

Failed to import token from file.
Error saving metadata to LUKS2 header in device <devnode>
Unable to update metadata; operation cancelled
Error adding new binding to <devnode>
.

Expected results:
The "stratis pool add-data..." command successfully adds the second block device.

Additional info:
As a possible workaround, the block device can be added by running "stratis pool unbind clevis <poolname>", and re-binding via providing the thumbprint:

1. Run the following command to obtain the thumbprint from the tang server:

curl -s localhost/adv | jq -r .payload | base64 -d | jose jwk use -i- -r -u verify -o- | jose jwk thp -i-

2. Run the "stratis pool bind" command using the "--thumbprint" option, and the thumbprint provided from step 1:

   stratis pool bind tang spool1 http://<local IP> --thumbprint <THUMBPRINT>