@@ -71,6 +71,7 @@ tpm2 loadexternal -C e -u test_rsa_ek.pub -c rsa_key.ctx
7171tpm2 readpublic -c rsa_key.ctx -f pem -o test_rsa_ek.pem
7272openssl x509 -pubkey -in rsa_ek_cert.bin -noout -out test_ek.pem
7373diff test_rsa_ek.pem test_ek.pem
74+ tpm2 flushcontext -t
7475
7576# Sample ECC ek public from a real platform
7677echo " 007a0023000b000300b20020837197674484b3f81a90cc8d46a5d724fd52
@@ -90,6 +91,7 @@ tpm2 loadexternal -C e -u test_ecc_ek.pub -c ecc_key.ctx
9091tpm2 readpublic -c ecc_key.ctx -f pem -o test_ecc_ek.pem
9192openssl x509 -pubkey -in ecc_ek_cert.bin -noout -out test_ek.pem
9293diff test_ecc_ek.pem test_ek.pem
94+ tpm2 flushcontext -t
9395
9496# Retrieve EK certificates from NV indices
9597RSA_EK_CERT_NV_INDEX=0x01C00002
@@ -170,14 +172,15 @@ tpm2 getekcertificate -o nv_rsa_ek_cert.der -o nv_ecc_ek_cert.der
170172diff nv_rsa_ek_cert.der rsa_ek_cert.der
171173diff nv_ecc_ek_cert.der ecc_ek_cert.der
172174
173- rm nv_rsa_ek_cert.der rsa_ek_cert.der nv_ecc_ek_cert.der ecc_ek_cert.der priv_key.pem -f
175+ rm nv_rsa_ek_cert.der nv_ecc_ek_cert.der -f
174176
175177# # Make sure that if there are several certificates of the same type, then the one belonging to low range has priority
176178openssl x509 -in ecc_ek_cert.bin -out ecc_low_range_ek_cert.der -outform DER
177179define_ek_cert_nv_index ecc_low_range_ek_cert.der $ECC_EK_CERT_NV_INDEX
178180
179- tpm2 getekcertificate -o nv_ecc_ek_cert.der
181+ tpm2 getekcertificate -o nv_rsa_ek_cert.der -o nv_ecc_ek_cert.der
180182
181183diff nv_ecc_ek_cert.der ecc_low_range_ek_cert.der
184+ diff nv_rsa_ek_cert.der rsa_ek_cert.der
182185
183186exit 0
0 commit comments