From: Daniel Salzman <daniel.salzman@nic.cz>
Date: Sun, 9 Aug 2026 17:09:23 +0000 (+0200)
Subject: tests-extra: call keymgr keystore test if not ASAN
X-Git-Url: http://git.ipfire.org/index.cgi?a=commitdiff_plain;ds=sidebyside;p=thirdparty%2Fknot-dns.git

tests-extra: call keymgr keystore test if not ASAN
---

diff --git a/tests-extra/tests/dnssec/softhsm/test.py b/tests-extra/tests/dnssec/softhsm/test.py
index 4418927c8d..0c74c11db6 100644
--- a/tests-extra/tests/dnssec/softhsm/test.py
+++ b/tests-extra/tests/dnssec/softhsm/test.py
@@ -59,9 +59,12 @@ key_ids = [key.split()[0] for key in keys.strip().splitlines()]
 for key_id in key_ids:
     isset(keys2.has_key(key_id), f"key {key_id} in keys2")
 
-# Run keystore test and benchmark
-_, out, _ = Keymgr.run_check(knot1.confile, "keys1", "keystore-test", env=keys1.env())
-isset("PKCS #11" in out, "keystore-test")
+# Run keystore test (only with Valgrind due to leaks in Ed25518 Ed448)
+if knot1.valgrind:
+    _, out, _ = Keymgr.run_check(knot1.confile, "keys1", "keystore-test", env=keys1.env())
+    isset("PKCS #11" in out, "keystore-test")
+
+# Run keystore benchmark
 _, out, _ = Keymgr.run_check(knot1.confile, "keys1", "keystore-bench", "1", "ECDSAP256SHA256", env=keys1.env())
 isset("ECDSAP256SHA256" in out, "keystore-bench")