| View previous topic :: View next topic |
| Author |
Message |
AlphaXeos
n00b
Joined: 02 Aug 2016
Posts: 28
|
 Posted: Wed Oct 05, 2016 10:46 pm Post subject: [SOLVED] Certs Error During Make |
 |
|
When im compiling my kernel with make it gives me a certs signing key error. See image for details
http://m.imgur.com/59y2yVF
Last edited by AlphaXeos on Fri Oct 07, 2016 7:26 pm; edited 1 time in total |
|
| Back to top |
|
 |
fedeliallalinea
Bodhisattva
Joined: 08 Mar 2003
Posts: 22713
Location: here
|
| Posted: Thu Oct 06, 2016 5:36 am Post subject: |
|
|
You have activate "Module signature verification" in kernel?
Post output of
| Code: | | $ grep MODULE_SIG /usr/src/linux/.config |
_________________
Questions are guaranteed in life; Answers aren't. |
|
| Back to top |
|
|
AlphaXeos
n00b
Joined: 02 Aug 2016
Posts: 28
|
| Posted: Thu Oct 06, 2016 10:21 pm Post subject: |
|
|
| Code: | #
# GCOV-based kernel profiling
#
# CONFIG_GCOV_KERNEL is not set
CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y
# CONFIG_HAVE_GENERIC_DMA_COHERENT is not set
CONFIG_SLABINFO=y
CONFIG_RT_MUTEXES=y
CONFIG_BASE_SMALL=0
CONFIG_MODULES=y
CONFIG_MODULE_FORCE_LOAD=y
CONFIG_MODULE_UNLOAD=y
# CONFIG_MODULE_FORCE_UNLOAD is not set
CONFIG_MODVERSIONS=y
CONFIG_MODULE_SRCVERSION_ALL=y
CONFIG_MODULE_SIG=y
# CONFIG_MODULE_SIG_FORCE is not set
CONFIG_MODULE_SIG_ALL=y
CONFIG_MODULE_SIG_SHA1=y
# CONFIG_MODULE_SIG_SHA224 is not set
# CONFIG_MODULE_SIG_SHA256 is not set
# CONFIG_MODULE_SIG_SHA384 is not set
# CONFIG_MODULE_SIG_SHA512 is not set
CONFIG_MODULE_SIG_HASH="sha1"
# CONFIG_MODULE_COMPRESS is not set
CONFIG_MODULES_TREE_LOOKUP=y
CONFIG_BLOCK=y
CONFIG_BLK_DEV_BSG=y
CONFIG_BLK_DEV_BSGLIB=y
CONFIG_BLK_DEV_INTEGRITY=y
CONFIG_BLK_DEV_THROTTLING=y
# CONFIG_BLK_CMDLINE_PARSER is not set |
|
|
| Back to top |
|
|
Ant P.
Watchman
Joined: 18 Apr 2009
Posts: 6037
|
| Posted: Fri Oct 07, 2016 12:33 am Post subject: |
|
|
I assume you know what you're doing and have the required amount of crypto expertise, which is in effect what you've declared by turning on that non-default config option.
Here's your required reading material, good luck:
- The help text for CONFIG_MODULE_SIG
- linux/Documentation/module-signing.txt
- https://wiki.gentoo.org/wiki/Signed_kernel_module_support |
|
| Back to top |
|
|
AlphaXeos
n00b
Joined: 02 Aug 2016
Posts: 28
|
| Posted: Fri Oct 07, 2016 1:42 am Post subject: |
|
|
| Ant P. wrote: | I assume you know what you're doing and have the required amount of crypto expertise, which is in effect what you've declared by turning on that non-default config option.
Here's your required reading material, good luck:
- The help text for CONFIG_MODULE_SIG
- linux/Documentation/module-signing.txt
- https://wiki.gentoo.org/wiki/Signed_kernel_module_support |
I wasn't aware that i had a non-default config option set. Could you point me in the right direction? thanks |
|
| Back to top |
|
|
Tony0945
Advocate
Joined: 25 Jul 2006
Posts: 3314
Location: Illinois, USA
|
| Posted: Fri Oct 07, 2016 2:33 am Post subject: |
|
|
| AlphaXeos wrote: | | I wasn't aware that i had a non-default config option set. Could you point me in the right direction? thanks |
| Code: | X3 ~ # grep MODULE_SIG /usr/src/linux/.config
# CONFIG_MODULE_SIG is not set
|
Never had a problem. Just run "make menuconfig" and turn that option off. To do that:
1. enable loadable module support (on the first screen)
2. press enter to follow the arrow.
3. disable "Module signature verification"
I got this by typing "/config_module_sig" while in menuconfig. Yes, it's case insensitive and the "config_" isn't really necessary. "/module_sig" works as well.
I learned that from this forum. |
|
| Back to top |
|
|
AlphaXeos
n00b
Joined: 02 Aug 2016
Posts: 28
|
| Posted: Fri Oct 07, 2016 7:26 pm Post subject: |
|
|
| Tony0945 wrote: | | AlphaXeos wrote: | | I wasn't aware that i had a non-default config option set. Could you point me in the right direction? thanks |
| Code: | X3 ~ # grep MODULE_SIG /usr/src/linux/.config
# CONFIG_MODULE_SIG is not set
|
Never had a problem. Just run "make menuconfig" and turn that option off. To do that:
1. enable loadable module support (on the first screen)
2. press enter to follow the arrow.
3. disable "Module signature verification"
I got this by typing "/config_module_sig" while in menuconfig. Yes, it's case insensitive and the "config_" isn't really necessary. "/module_sig" works as well.
I learned that from this forum. |
Thanks for the help!
Got it working successfully |
|
| Back to top |
|
|
|
Kernel & Hardware
