Error while loading a signed kernel module : Request for unknown module key : err -11
Posted: 2017/12/04 10:48:33
Hi,
I have created a key pair and enrolled the public key using the mokutil
I am using the key pair to sign a kernel module
Now I am loading this signed kernel module using modprobe
I am getting following error. Logs are captured from /var/log/messages
I was expecting that the signed kernel module should be loaded without any error, as I have enrolled the public key to kernel.
Can anybody please explain the reason for this error and how to load the signed module with out any error?
Thanks.
I have created a key pair and enrolled the public key using the mokutil
Code: Select all
mokutil --import pubkey.der
Code: Select all
scripts/sign-file sha512 private.key pubkey.der mymodule.ko
Code: Select all
modprobe mymodule
Code: Select all
Dec 5 01:17:28 localhost kernel: Request for unknown module key 'Example, Inc. Kernel signing key: 4efdd0b379fda0f5e0693cd39a773b20000f853b' err -11
Dec 5 01:17:28 localhost kernel: mymodule: loading out-of-tree module taints kernel.
Dec 5 01:17:28 localhost kernel: mymodule: module license 'unspecified' taints kernel.
Dec 5 01:17:28 localhost kernel: Disabling lock debugging due to kernel taint
Dec 5 01:17:28 localhost kernel: mymodule: module verification failed: signature and/or required key missing - tainting kernel
Dec 5 01:17:28 localhost kernel: Hello world 1.
Can anybody please explain the reason for this error and how to load the signed module with out any error?
Thanks.