Re: IMA signature generated by evmctl has unexpected key identifier

[Lakshmi <nramas@xxxxxxxxxxxxxxxxxxx>]

On 5/14/19 3:07 PM, Lakshmi wrote:

Hi Mimi,

> > I should have asked you to make sure that the last 8 bytes of "X509v3
> > Subject Key Identifier" in the certificate used to sign the kernel
> > image is the same as above.
> >
> > Mimi
>
> Yes - the Subject Key Identifier matches the output from keyctl.
>
> Please see below:
>
> X509v3 Subject Key Identifier:
>                  
> 85:51:2D:09:FC:12:C7:F3:8B:96:79:35:26:51:DC:B3:65:90:33:36
>
> thanks,
>   -lakshmi

Please let me know if you need more information\logs on this issue.

Thanks,
 -lakshmi