From 7ecc9702495427fc8a257a6022e9d59a9637bbb5 Mon Sep 17 00:00:00 2001
From: Chris Coulson <chris.coulson@amutable.com>
Date: Thu, 20 Aug 2026 15:52:25 +0100
Subject: [PATCH] tpm2: add missing dlopen_libcrypto

tpm2_tpmt_signature_to_pem uses openssl functions directly, so it needs
to ensure that it is dlopened.
---
 src/shared/tpm2-util.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/shared/tpm2-util.c b/src/shared/tpm2-util.c
index 6e2865a3a5..60aca47207 100644
--- a/src/shared/tpm2-util.c
+++ b/src/shared/tpm2-util.c
@@ -10283,6 +10283,10 @@ int tpm2_tpmt_signature_to_pem(const TPMT_SIGNATURE *signature, char **ret) {
         assert(signature);
         assert(ret);
 
+        r = dlopen_libcrypto(LOG_DEBUG);
+        if (r < 0)
+                return r;
+
         const char *label = NULL;
         _cleanup_free_ void *sig = NULL;
         size_t sig_len = 0;