Comment 11 for bug 2018908

(Sorry, I'm just back for an extended weekend.)

Since there was the change from openssl 1.1 to 3, but the test plan should work in both cases,
I'm better going with an old example (I already wanted to update) from this 16.04 based paper:
https://people.canonical.com/~fheimes/MG_HWCrypto_with_Ubuntu_on_z.pdf (chapter 6.4, 6.4.3 and 6.4.4)

It uses as well a larger set of packages (libica-utils libica4 openssl-ibmca opencryptoki) from the archives, but IBM Java 8 on top.

The stack/scenario is like this:

   Java program using crypto
                |
               JCA (with IBM Java 8)
                |
          IBMPKCS11Impl
                |
           OpenCryptoki
            / \
       ICA-token soft-token ...
            |
 s390x_clear-key_crypto-hw

I just ran the entire test case on 23.04 and have the detailed commands in this attached text file.

I'll add a summary of it to the Bug description / SRU Justification above and will reference for the details to this attached doc.