Re: PKCS#7 signature not signed with a trusted key

On 4/12/23 03:55, Ralf Mardorf wrote:

Hi,

Bit hard to say from above - clearly these need 2 different keys (right?) also you dont say what CONFIG_MODULE_COMPRESS_xx are set to either since you have 2 different module compressions as well as keys being different. Maybe post the actual fatal kernel error exactly - is it possible the error you printed was non-fatal and something else kiilled boot? My understanding of out of tree signed kernel modules (and some tools) is captured here (wiki is similar but likely bit out of date vs GH): https://github.com/gene-git/Arch-SKM That all said, it appears you've built the kernel with one cert and signed using a different one - maybe? best, gene