Re: Signing Kernel Module with the Private Key

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Jan 10, 2019 at 12:03 AM Samuel Sieb <samuel@xxxxxxxx> wrote:
>
> On 1/9/19 10:03 PM, Chris Murphy wrote:
> > I'm not finding an updated version of this documentation:
> > https://docs.fedoraproject.org/en-US/Fedora/26/html/System_Administrators_Guide/sect-signing-kernel-module-with-the-private-key.html
> >
> > And when I follow that, copy/pasting the perl script is stomping on my
> > kernel modules, making them zero length files. I also can't tell from
> > the documentation if this perl script should work on xz compressed
> > kernel modules, which they are by default on Fedora. I've tried it
> > both ways and still get zero length files, so I'm guessing the
> > documentation has gone stale or maybe the signing script has - not
> > sure how to troubleshoot it.
>
> That script is a badly formatted copy from a terminal window.  The "\ >"
> parts are supposed to be the end of the line and the continuation marker
> of the next.  The script should be
>
> perl /usr/src/kernels/$(uname -r)/scripts/sign-file sha256
> my_signing_key.priv my_signing_key_pub.der my_module.ko
>
> all on one line (in case email processing breaks it).  I would assume
> the kernel module can't be compressed for the signing.

OK that fixes the zero length file problem. But I still get this
unrecognized character error, whether compressed or not.

[root@fnuc extra]# perl
/usr/src/kernels/4.19.14-300.fc29.x86_64/scripts/sign-file sha256
/home/chris/MOK.priv /home/chris/MOK.der icp.ko
Unrecognized character \x7F; marked by <-- HERE after <-- HERE near
column 1 at /usr/src/kernels/4.19.14-300.fc29.x86_64/scripts/sign-file
line 1.
[root@fnuc extra]# perl
/usr/src/kernels/4.19.14-300.fc29.x86_64/scripts/sign-file sha256
/home/chris/MOK.priv /home/chris/MOK.der splat.ko
Unrecognized character \x7F; marked by <-- HERE after <-- HERE near
column 1 at /usr/src/kernels/4.19.14-300.fc29.x86_64/scripts/sign-file
line 1.

File size and time stamp haven't changed so I'm assuming it's not signed.



-- 
Chris Murphy
_______________________________________________
kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx




[Index of Archives]     [Fedora General Discussion]     [Older Fedora Users Archive]     [Fedora Advisory Board]     [Fedora Security]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Mentors]     [Fedora Package Announce]     [Fedora Package Review]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Coolkey]     [Yum Users]     [Tux]     [Yosemite News]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [USB]     [Asterisk PBX]

  Powered by Linux