lkml.org 
[lkml]   [2016]   [May]   [3]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: v4.6-rc1 regression bisected, Problem loading in-kernel X.509 certificate (-2)
    From
    Date
    Hi Jamie,
    On 05/03/2016 01:35 PM, David Howells wrote:
    > (cc'ing Tadeusz as he did the pkcs1 padding function)
    >
    > Jamie Heilman <jamie@audible.transient.net> wrote:
    >
    >>>> Problem loading in-kernel X.509 certificate (-2)
    >>>
    >>> ENOENT? Hmmm... The only place that is generated is in the crypto layer.
    >>> That suggests missing crypto of some sort.
    >>>
    >>> The attached patch enables some debugging in some relevant files if you can
    >>> try applying it to your kernel.
    >>
    >> Alrighty, presumably relevant bits:
    >>
    >> X.509: Cert Issuer: Build time autogenerated kernel key
    >> X.509: Cert Subject: Build time autogenerated kernel key
    >> X.509: Cert Key Algo: rsa
    >> X.509: Cert Valid period: 1461826791-4615426791
    >> X.509: Cert Signature: rsa + sha512
    >> X.509: ==>x509_check_signature()
    >> X.509: ==>x509_get_sig_params()
    >> X.509: <==x509_get_sig_params() = 0
    >> PKEY: ==>public_key_verify_signature()
    >> X.509: Cert Verification: -2
    >
    > Hmmm... Okay, the only ways out of public_key_verify_signature() without
    > printing a leaving message are for snprintf() to overrun (which would return
    > error -22) or for crypto_alloc_akcipher() to have failed; everything else must
    > go through the kleave() at the pr_devel() at the bottom of the function.
    >
    > Can you stick:
    >
    > pr_devel("ALGO: %s\n", alg_name);
    >
    > immediately before this line:
    >
    > tfm = crypto_alloc_akcipher(alg_name, 0, 0);
    >
    > and try it again?
    >

    Could you please check if this one fixes the problem for you:
    https://patchwork.kernel.org/patch/8766361/
    Thanks,
    --
    TS

    \
     
     \ /
      Last update: 2016-05-03 23:01    [W:3.099 / U:0.392 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site