Unset / set WPFF so we can test the actual test case

Author: aidangarske

.github/scripts/pam-pkcs11-test.sh

@@ -63,6 +63,10 @@ fi
 
 echo "[*] Configuring pam_pkcs11..."
 
+# Temporarily unset WOLFPROV_FORCE_FAIL so we can test the failure case
+ORIG_WOLFPROV_FORCE_FAIL="$WOLFPROV_FORCE_FAIL"
+unset WOLFPROV_FORCE_FAIL
+
 # Generate dummy CA cert if missing
 if [ ! -f /test/certs/test-ca.crt ]; then
     echo "[*] Generating dummy test-ca.crt..."
@@ -99,6 +103,9 @@ cp /etc/pam.d/common-auth /etc/pam.d/common-auth.bak
 echo "auth sufficient pam_pkcs11.so debug" | tee /etc/pam.d/common-auth > /dev/null
 cat /etc/pam.d/common-auth.bak | tee -a /etc/pam.d/common-auth > /dev/null
 
+# Restore WOLFPROV_FORCE_FAIL
+export WOLFPROV_FORCE_FAIL="$ORIG_WOLFPROV_FORCE_FAIL"
+
 echo "[*] Initializing SoftHSM (simulated smartcard)..."
 mkdir -p /var/lib/softhsm/tokens
 softhsm2-util --init-token --free --label "testtoken" --pin 1234 --so-pin 123456

.github/workflows/pam-pkcs11.yml

@@ -1,4 +1,4 @@
-name: pam_pkcs11 Tests
+name: pam-pkcs11 Tests
 
 # START OF COMMON SECTION
 on: