lkml.org 
[lkml]   [2014]   [Nov]   [24]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: [PATCH 0/5] MODSIGN: Use PKCS#7 for module signatures
    From
    Date
    On Mon, 2014-11-24 at 16:13 +0000, David Howells wrote: 
    > David Howells <dhowells@redhat.com> wrote:
    >
    > > > Actually after cleaning the tree and re-signing the modules, I get following
    > > >
    > > > Unrecognized character \x7F; marked by <-- HERE after <-- HERE near
    > > > column 1 at ./scripts/sign-file line 1.
    > > > make[1]: *** [arch/x86/crypto/aes-x86_64.ko] Error 255
    > >
    > > warthog>grep -r sign-file Makefile
    > > mod_sign_cmd = perl $(srctree)/scripts/sign-file $(CONFIG_MODULE_SIG_HASH) $(MODSECKEY) $(MODPUBKEY)
    > >
    > > Because of that. I need to remove the 'perl' bit.
    >
    > It's a little more involved than that. The X.509 cert being passed to the
    > program is binary, whereas the one I've been testing with is PEM encoded - and
    > libssl has separate routines that don't work out for themselves which encoding
    > is in force. Proposed changes below.

    With this patch, I'm now able to install and boot the new kernel and
    modules.

    Mimi



    \
     
     \ /
      Last update: 2014-11-24 18:41    [W:3.248 / U:0.008 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site