Re: Signing Kernel Module with the Private Key

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello Chris,

As Petr Pisar said it, last Fedora's kernel uses a compiled binary software sign-file file. It
is still a perl script in RHEL.

Your command line should work if you remove perl invocation:

/usr/src/kernels/4.19.14-300.fc29.x86_64/scripts/sign-file sha256
/home/chris/MOK.priv /home/chris/MOK.der

providing you enrolled your public key in MOK with mokutil.

Concerning compressing modules, they have to be built, stripped (if
needed), signed and compressed, in that order to make them work with
secure boot.
So if the build process compresses your modules automatically, you have
to decompress them before signing, and re-compress them after signing.

Hope this will help you.

Cordially,


-- 
NVieville
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Users]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux