supply PIN to tpm ssl engine
In order to use a parent key with a password you have to run openssl als single command and issue the sub-commands interactively
openssl
> engine ... -pre PID:mysecret
> req ...
NEW: seems to be PIN instead of PID now
--------------------------------------------------------------------------------
very new: Openssl 3 does not support interactive mode anymore. So now the password has to be
-provided as parameter for genkey
- stored as environment variable for req
(example generate key)
openssl genpkey -provider rpm2 -provider base -algorithm RSA -pkeyopt rsa_keygen_bits:2048 -pkeyopt parent:0x81000001 -pkeyopt parent-auth:<SRK_PASS> -pkeyopt user-auth <new key pwd> -out <new key file>
(example create request)
export TPM2OPENSSL_PARENT_AUTH=<parent key>
openssl req -new -provider tpm2 -provider base -key <keyfile> -pkeyopt parent:0x81000001 -out <new request file>
(key pwd is requested interatcively)