Jürgen Repp

In json-c version 0.13 (from 2017) the function `json_object_array_del_idx` was added and the return type of `json_object_object_add` was changed.

Does it work with? `make -j LDFLAGS="-lcrypto -lcurl"`

One remark: In the past I did debug FAPI with the following script: ``` #!/usr/bin/env bash export TPM20TEST_TCTI=mssim touch test/integration/main-fapi.c make $1 'CFLAGS=-DFAPI_TEST_EK_CERT_LESS -g' libtool --mode=execute cgdb --args $1 ```...

> 2\. no [global state](https://github.com/tpm2-software/tpm2-tss/blob/761d15adf7d04e7424f7c3016f0f5b5914c5648f/test/integration/main-fapi.c#L29-L38) you marked the variables related to the used config and keystore paths. What exactly did you mean in this context with "no global state"?

yes it would be cleaner to use a TSS2_TEST_FAPI_CONTEXT. As you wrote the checks, the writing of the EK pub to a file and perhaps the computation of the EK...

> ? If so, we could move the call to `create_ca.sh` e.g. to `./bootstrap.sh`. But you need the ek to generate the certificate. If you execute the provisioning with libtpms...

In the TPM reference implementation at: https://github.com/microsoft/ms-tpm-20-ref/blob/e9fc7b89d865536c46deb63f9c7d0121a3ded49c/TPMCmd/tpm/src/command/Object/Object_spt.c#L1377 you can see that the size of the TPM2B private is compared with the size of the TPM2B sensitive + 2. I think...

What are the first four bytes of the duplicate parameter? There should be to two big endian UINT16 numbers. The second has to be the first - 2. Otherwise there...

Since the problem was fixed after `tpm2 flushcontext --saved-session` there seem to be to many active sessions. You can list them with: `tpm2_getcap handles-saved-session` or determine the max number with:...

@nikolkam Sorry I do not have the environment to compile your c++ application :-( I checked the tcti trace of Esys_StartAuthSession. The handle 0x80ffffff was used for the tpm key...