linux-kernel - Re: [BUILD] [FOUND WORKAROUND] Unable to sign drivers on Ubuntu 22.04 LTS desktop

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Fri, 5 May 2023 11:00:50 +0200
From:   Mirsad Goran Todorovac <mirsad.todorovac@....unizg.hr>
To:     Mirsad Goran Todorovac <mirsad.goran.todorovac@....hr>,
        Bagas Sanjaya <bagasdotme@...il.com>
Cc:     linux-kernel@...r.kernel.org
Subject: Re: [BUILD] [FOUND WORKAROUND] Unable to sign drivers on Ubuntu 22.04
 LTS desktop

On 4.5.2023. 19:02, Mirsad Goran Todorovac wrote:
> Hi Bagas,
> 
> I seem to have run into a dead end with this.
> 
> OpenSSL 3.0.2 refuses to cooperate, despite enabling legacy ciphers:
> 
>    BTF [M] net/nsh/nsh.ko
>    BTF [M] net/hsr/hsr.ko
> make -f ./Makefile ARCH=x86     KERNELRELEASE=6.3.0+ intdeb-pkg
> sh ./scripts/package/builddeb
>    INSTALL debian/linux-image/lib/modules/6.3.0+/kernel/arch/x86/events/intel/intel-cstate.ko
>    SIGN debian/linux-image/lib/modules/6.3.0+/kernel/arch/x86/events/intel/intel-cstate.ko
> At main.c:170:
> - SSL error:1E08010C:DECODER routines::unsupported: ../crypto/encode_decode/decoder_lib.c:101
> sign-file: ./
> make[6]: *** [scripts/Makefile.modinst:87: debian/linux-image/lib/modules/6.3.0+/kernel/arch/x86/events/intel/intel-cstate.ko] Error 1
> make[6]: *** Deleting file 'debian/linux-image/lib/modules/6.3.0+/kernel/arch/x86/events/intel/intel-cstate.ko'
> make[5]: *** [Makefile:1955: modules_install] Error 2
> make[4]: *** [scripts/Makefile.package:150: intdeb-pkg] Error 2
> make[3]: *** [Makefile:1657: intdeb-pkg] Error 2
> make[2]: *** [debian/rules:16: binary-arch] Error 2
> dpkg-buildpackage: error: debian/rules binary subprocess returned exit status 2
> make[1]: *** [scripts/Makefile.package:139: bindeb-pkg] Error 2
> make: *** [Makefile:1657: bindeb-pkg] Error 2
> 
> I have tried to enable NEXT crypto mode:
> 
> % sudo update-crypto-policies --set NEXT
> 
> and rebooted, but no use.
> 
> Google also doesn't give a clue.
> I have been able to compile kernels on Ubuntu 22.04 LTS on my laptop just about a year ago.

Hi all,

There was no success in building 6.3+ with the Ubuntu generic config, but it has succeeded
with the config derived from Debian one.

Still, it would be interesting to find what is preventing the Ubuntu config from signing the
kernel modules. Up to that point the build process is fine.

Best regards,
Mirsad

-- 
Mirsad Todorovac
System engineer
Faculty of Graphic Arts | Academy of Fine Arts
University of Zagreb
Republic of Croatia, the European Union

Sistem inženjer
Grafički fakultet | Akademija likovnih umjetnosti
Sveučilište u Zagrebu