From cc21591f56b04ad1ec4acfc2b6b383484bc8df5a Mon Sep 17 00:00:00 2001
From: Simo Sorce <simo@redhat.com>
Date: Tue, 9 Jul 2024 11:43:51 -0400
Subject: [PATCH] Use a single tool for setting up the token

pkcs11-tool is well capable of initializing a token, so just use it for
everything and drop use of p11tool which is quirkier.

Signed-off-by: Simo Sorce <simo@redhat.com>
---
 tests/setup-kryoptic.sh | 26 +++++++++-----------------
 1 file changed, 9 insertions(+), 17 deletions(-)

diff --git a/tests/setup-kryoptic.sh b/tests/setup-kryoptic.sh
index 8b8e32d6..ec9c194a 100755
--- a/tests/setup-kryoptic.sh
+++ b/tests/setup-kryoptic.sh
@@ -87,25 +87,16 @@ if [ -d "${TOKDIR}" ]; then
 fi
 mkdir "${TOKDIR}"
 
-# Kryoptic configuration
-export KRYOPTIC_CONF="$TMPPDIR/tokens/kryoptic.sql"
-
 title LINE "Creating Kyroptic database"
 
-export GNUTLS_SO_PIN=${PINVALUE}
-p11tool --provider="${P11LIB}" --initialize \
-    --label="Test" \
-    "pkcs11:manufacturer=Kryoptic%20Project" 2>&1
-unset GNUTLS_SO_PIN
-
-title LINE "Setting User PIN"
-# For some reason currently p11tool requires adding extraneous %00 termination
-# marks at the end of the manufacturer and token names when using the
-# --initialize-pin option
-export GNUTLS_PIN=${PINVALUE}
-p11tool --provider="${P11LIB}" --initialize-pin \
-    "pkcs11:manufacturer=Kryoptic%20Project%00;token=Test%00" 2>&1
-
+# Kryoptic configuration
+export KRYOPTIC_CONF="$TMPPDIR/tokens/kryoptic.sql"
+# init token
+pkcs11-tool --module "${P11LIB}" --init-token \
+    --label "Pkcs11 Provider Tests" --so-pin "${PINVALUE}" 2>&1
+# set user pin
+pkcs11-tool --module "${P11LIB}" --so-pin "${PINVALUE}" \
+    --login --login-type so --init-pin --pin "${PINVALUE}" 2>&1
 
 P11DEFARGS="--module=${P11LIB} --login --pin=${PINVALUE}"
 
@@ -119,6 +110,7 @@ email = "testcert@example.org"
 signing_key
 encryption_key
 HEREDOC
+export GNUTLS_PIN=$PINVALUE
 SERIAL=1