On Thu, Jan 10, 2019 at 12:03 AM Samuel Sieb <samuel@xxxxxxxx> wrote: > > On 1/9/19 10:03 PM, Chris Murphy wrote: > > I'm not finding an updated version of this documentation: > > https://docs.fedoraproject.org/en-US/Fedora/26/html/System_Administrators_Guide/sect-signing-kernel-module-with-the-private-key.html > > > > And when I follow that, copy/pasting the perl script is stomping on my > > kernel modules, making them zero length files. I also can't tell from > > the documentation if this perl script should work on xz compressed > > kernel modules, which they are by default on Fedora. I've tried it > > both ways and still get zero length files, so I'm guessing the > > documentation has gone stale or maybe the signing script has - not > > sure how to troubleshoot it. > > That script is a badly formatted copy from a terminal window. The "\ >" > parts are supposed to be the end of the line and the continuation marker > of the next. The script should be > > perl /usr/src/kernels/$(uname -r)/scripts/sign-file sha256 > my_signing_key.priv my_signing_key_pub.der my_module.ko > > all on one line (in case email processing breaks it). I would assume > the kernel module can't be compressed for the signing. OK that fixes the zero length file problem. But I still get this unrecognized character error, whether compressed or not. [root@fnuc extra]# perl /usr/src/kernels/4.19.14-300.fc29.x86_64/scripts/sign-file sha256 /home/chris/MOK.priv /home/chris/MOK.der icp.ko Unrecognized character \x7F; marked by <-- HERE after <-- HERE near column 1 at /usr/src/kernels/4.19.14-300.fc29.x86_64/scripts/sign-file line 1. [root@fnuc extra]# perl /usr/src/kernels/4.19.14-300.fc29.x86_64/scripts/sign-file sha256 /home/chris/MOK.priv /home/chris/MOK.der splat.ko Unrecognized character \x7F; marked by <-- HERE after <-- HERE near column 1 at /usr/src/kernels/4.19.14-300.fc29.x86_64/scripts/sign-file line 1. File size and time stamp haven't changed so I'm assuming it's not signed. -- Chris Murphy _______________________________________________ kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx
