tests: Add a check for OPENSSL_ENABLE_SHA1_SIGNATURES in log file

CentOS 9 and RHEL >= 9.4 (maybe earlier also) are expected to log the
setting of OPENSSL_ENABLE_SHA1_SIGNATURES when a libtpms v0.9 state is
used where signing a SHA1 was allowed and needs to be enable with this
environment variable.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

tests/common

@@ -1014,3 +1014,27 @@ function check_swtpm_storage_locked()
 		exit 1
 	fi
 }
+
+# Get the name of the distro; only a few distros are supported for specific tests
+function get_distro_name()
+{
+	if [ -r /etc/redhat-release ]; then
+		if grep -qE "^Red Hat Enterprise" /etc/redhat-release; then
+			echo "RHEL"
+		elif grep -qE "^CentOS Stream release" /etc/redhat-release; then
+			echo "CentOS"
+		fi
+	fi
+}
+
+function get_rhel_version()
+{
+	sed -n 's/Red Hat Enterprise Linux release \([^ ]*\) .*/\1/p' /etc/redhat-release |
+		gawk '{split($0,a,"."); print a[1]*100 + a[2]}'
+}
+
+function get_centos_version()
+{
+	sed -n 's/CentOS Stream release \([0-9]*\).*/\1/p' /etc/redhat-release |
+		gawk '{print $0*100}'
+}

tests/test_tpm2_swtpm_setup_profile

@@ -304,9 +304,11 @@ cp "${TESTDIR}/data/tpm2state6/tpm2-00.permall" "${workdir}"
 before=$(get_filesize "${workdir}/tpm2-00.permall")
 
 # Avoid swptm sending TPM2_Shutdown(SU_STATE) and adding savestate to the state file
+rm -f "${workdir}/logfile"
 run_swtpm "${SWTPM_INTERFACE}" \
 	--tpm2 \
-	--flags not-need-init,startup-clear,disable-auto-shutdown
+	--flags not-need-init,startup-clear,disable-auto-shutdown \
+	--log "file=${workdir}/logfile"
 
 if ! kill_quiet -0 "${SWTPM_PID}"; then
 	echo "Error: ${SWTPM_INTERFACE} TPM did not start."
@@ -344,6 +346,21 @@ fi
 
 echo "Test with state written by libtpms v0.9 passed"
 
+# Check that swtpm emitted log message with OPENSSL_ENABLE_SHA1_SIGNATURES=1 on
+# RHEL and CentOS; libtpms 0.9 supported SHA1 signatures
+case $(get_distro_name) in
+RHEL)	[ "$(get_rhel_version)" -ge 904 ] && exp=1;;
+CentOS)	[ "$(get_centos_version)" -ge 900 ] && exp=1;;
+*)	exp=0;;
+esac
+if [ "${exp}" -eq 1 ]; then
+	if ! grep -q OPENSSL_ENABLE_SHA1_SIGNATURES "${workdir}/logfile"; then
+		echo "Missing reference to OPENSSL_ENABLE_SHA1_SIGNATURES in logfile"
+		exit 1
+	fi
+	echo "Test checking for reference to OPENSSL_ENABLE_SHA1_SIGNATURES in logfile passed"
+fi
+
 # If the user passes the null profile in then libtpms has to write state
 # at the level of libtpms v0.9 and the size of the state file has to be
 # the same as the one created with libtpms v0.9