From 4deea7397745fd4cc4a202365c3298730e882e60 Mon Sep 17 00:00:00 2001
From: Bastien Nocera <hadess@hadess.net>
Date: Thu, 19 Feb 2026 13:28:23 +0100
Subject: [PATCH] unit: Add better check for pkcs8_key_parser availability

Check whether the pkcs8_key_parser kernel module is available (whether
built-in or as a module) before announcing that we support PKCS#8.
---
 unit/test-eapol.c | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/unit/test-eapol.c b/unit/test-eapol.c
index 58f3e054..49f7aac5 100644
--- a/unit/test-eapol.c
+++ b/unit/test-eapol.c
@@ -27,6 +27,7 @@
 #include <stdio.h>
 #include <string.h>
 #include <assert.h>
+#include <sys/stat.h>
 #include <linux/if_ether.h>
 #include <ell/ell.h>
 
@@ -3923,6 +3924,18 @@ static bool aes_precheck(const void *data)
 
 static bool pkcs8_precheck(const void *data)
 {
+	struct stat st;
+
+	/*
+	 * Despite the path, this directory exists whether the module
+	 * is external or built-in.
+	 */
+	if (stat("/sys/module/pkcs8_key_parser", &st) < 0)
+		return false;
+
+	if (!S_ISDIR(st.st_mode))
+		return false;
+
 	return (IS_ENABLED(HAVE_PKCS8_SUPPORT) &&
 		l_cipher_is_supported(L_CIPHER_AES) &&
 		l_cipher_is_supported(L_CIPHER_AES_CBC) &&