Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1215263

Re: Module signing broken after SYSTEM_DATA_VERIFICATION commit?

From David Howells <dhowells@redhat.com>
Newsgroups linux.kernel
Subject Re: Module signing broken after SYSTEM_DATA_VERIFICATION commit?
Date 2015-08-28 12:30 +0200
Message-ID <q2p51-t4-21@gated-at.bofh.it> (permalink)
References <q2hK9-6Hs-1@gated-at.bofh.it>
Organization Red Hat UK Ltd. Registered Address: Red Hat UK Ltd, Amberley Place, 107-111 Peascod Street, Windsor, Berkshire, SI4 1TE, United Kingdom. Registered in England and Wales under Company Registration No. 3798903

Show all headers | View raw


Valdis Kletnieks <Valdis.Kletnieks@vt.edu> wrote:

> [   31.829322] PKCS7: Unknown OID: [32] 2.16.840.1.101.3.4.2.3
> [   31.829328] PKCS7: Unknown OID: [180] 2.16.840.1.101.3.4.2.3

	OID_sha1,			/* 1.3.14.3.2.26 */
	OID_sha256,			/* 2.16.840.1.101.3.4.2.1 */

I suspect I'm missing something here in oid_registry.h.  Looking online, I
see:

	id-sha256 OBJECT IDENTIFIER ::= { hashAlgs 1 }
	id-sha384 OBJECT IDENTIFIER ::= { hashAlgs 2 }
	id-sha512 OBJECT IDENTIFIER ::= { hashAlgs 3 }
	id-sha224 OBJECT IDENTIFIER ::= { hashAlgs 4 }
	id-sha512-224 OBJECT IDENTIFIER ::= { hashAlgs 5 }
	id-sha512-256 OBJECT IDENTIFIER ::= { hashAlgs 6 }

Are you perchance using sha512 hashes in your signatures?

David
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Module signing broken after SYSTEM_DATA_VERIFICATION commit? Valdis Kletnieks <Valdis.Kletnieks@vt.edu> - 2015-08-28 04:40 +0200
  Re: Module signing broken after SYSTEM_DATA_VERIFICATION commit? David Howells <dhowells@redhat.com> - 2015-08-28 12:20 +0200
  Re: Module signing broken after SYSTEM_DATA_VERIFICATION commit? David Howells <dhowells@redhat.com> - 2015-08-28 12:30 +0200
    Re: Module signing broken after SYSTEM_DATA_VERIFICATION commit? Valdis.Kletnieks@vt.edu - 2015-08-28 23:10 +0200

csiph-web