]> git.ipfire.org Git - thirdparty/systemd.git/commit
creds: tolerate TPM2 seal failure in auto mode
authorLuca Boccassi <luca.boccassi@gmail.com>
Wed, 8 Jul 2026 14:40:59 +0000 (15:40 +0100)
committerLuca Boccassi <luca.boccassi@gmail.com>
Sat, 11 Jul 2026 16:09:13 +0000 (17:09 +0100)
commit19c08f2dfa38e970fc95ad25258c9bfba7dbf7ad
tree6a9bb14a7490cb3dfaac7033f1bd394e573cf8b4
parent8baed402984ddadfd51ca521f5759ea914f51370
creds: tolerate TPM2 seal failure in auto mode

Automatic key modes tolerate a failed TPM2 sealing attempt and
fall back to a host or null key. Do not consume TPM2 blob output in
that case, tpm2_seal() leaves it empty on failure, so the fallback
path should continue without TPM2 metadata.

Follow-up for 9e4379945b74ee7920fe375be0bcb04d8ef53873
src/shared/creds-util.c