Re: [PATCH 1/1] x509: only prefix strip raw serial numbers

From: David Howells
Date: Tue Sep 15 2015 - 05:59:53 EST


Andy Whitcroft <apw@xxxxxxxxxxxxx> wrote:

> This leads us to truncate the id for kernel module signing keys and to
> fail to recognise our own modules:
>
> [ 1.572423] Loaded X.509 cert 'Build time autogenerated kernel
> key: 62a7c3d2da278be024da4af8652c071f3fea33'
> [ 1.646153] Request for unknown module key 'Build time autogenerated
> kernel key: 0062a7c3d2da278be024da4af8652c071f3fea33' err -11

I don't suppose you've saved the key and a random small module that I can have
a play with?

What version of the kernel are you using, btw?

David
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/