famez

Results 11 comments of famez

I add the 2 code snippets for the 2 tests: 1. Context initialization on the parent process (fails): ```c #include #include #include #include #include #include #include // Added for wait()...

The key and cert are generated with the following commands: ```bash tpm2_createprimary -G ecc -c primary.ctx tpm2_evictcontrol -c primary.ctx 0x81000010 openssl req -nodes -x509 -subj "/C=$country/CN=$commonName" -keyout server_key.pem -out server_cert.pem...

Thanks, I will open an issue in the tpm2-openssl project. In any case, the problems seem to appear also when using a process, then, configure the context, then forking the...

Hello, Finally, @Danigaralfo and me came to, what we think, is a stable solution. Semaphores to protect every child of a forked/threaded process (the case for apache/nginx). Here the patch:...

Hello again, I attached the incorrect patch fixing the problem, in the previous one, still missing the creation of the semaphore in shared memory, this is the correct one: [semaphore.patch](https://github.com/user-attachments/files/18098206/semaphore.patch)

This is the code for testing the result. If 1s are printed on the screen, something went wrong, if all 0s, we are ok: ```bash #!/bin/bash # Number of concurrent...

Hi, @gotthardp, unfortunately, I keep having the same errors: If I configure Apache2 with mpm_worker and the following configuration (only threads): ```bash StartServers 1 MinSpareThreads 25 MaxSpareThreads 75 ThreadLimit 64...

The easiest way to reproduce the problem is to configure Apache2 with the provider, then opening several windows from Google Chrome, if you are lucky, you will have the bug...

I undertand that the repo is OS agnostic, so using POSIX semaphores is not the final solution, but I just tested in a RPI with real physical TPM (implementing TCG...

For a reason I don't know right know, seems that these operations must be atomic: - ESYS_HASH_ASYNC - ESYS_HASH_FINISH - ESYS_SIGN_ASYNC - ESYS_SIGN_FINISH Which is achieved, locking a semaphore at...