Kexec_file_load failed with "Missing required AuthAttr"

[dyoung@xxxxxxxxxx (Dave Young)]

Hi,

I saw the warning "Missing required AuthAttr" when testing kexec, known issue?
Idea about how to fix it?

The kernel is latest linus tree plus sevral patches from Toshi to cleanup io resource structure.

in function pkcs7_sig_note_set_of_authattrs():
        if (!test_bit(sinfo_has_content_type, &sinfo->aa_set) ||
            !test_bit(sinfo_has_message_digest, &sinfo->aa_set) ||
            (ctx->msg->data_type == OID_msIndirectData &&
             !test_bit(sinfo_has_ms_opus_info, &sinfo->aa_set))) {
                pr_warn("Missing required AuthAttr\n");
                return -EBADMSG;
        }

The third condition below is true:
(ctx->msg->data_type == OID_msIndirectData &&
             !test_bit(sinfo_has_ms_opus_info, &sinfo->aa_set))

I signed the kernel with redhat test key like below:
pesign -c 'Red Hat Test Certificate' -i arch/x86/boot/bzImage -o /boot/vmlinuz-4.4.0-rc8+ -s --force

Thanks
Dave