Need someone confirmation for the changes I did

viveksahu26

When I tried to run make oldconfig or make all recieve below error:
make[1]: *** No rule to make target 'debian/canonical-certs.pem', needed by 'certs/x509_certificate_list'. Stop. make: *** [Makefile:1809: certs] Error 2

To resolve this I find an solution and followed one of the blog(https://askubuntu.com/questions/1329538/compiling-the-kernel-5-11-11) for help:-

`openssl req -x509 -newkey rsa:4096 -keyout certs/mycert.pem -out certs/mycert.pem -nodes -days 3650

CONFIG_MODULE_SIG_KEY="certs/mycert.pem" CONFIG_SYSTEM_TRUSTED_KEYRING=y CONFIG_SYSTEM_TRUSTED_KEYS="certs/mycert.pem" CONFIG_SYSTEM_EXTRA_CERTIFICATE=y CONFIG_SYSTEM_EXTRA_CERTIFICATE_SIZE=4096 CONFIG_SECONDARY_TRUSTED_KEYRING=y CONFIG_SYSTEM_BLACKLIST_KEYRING=y CONFIG_SYSTEM_BLACKLIST_HASH_LIST=""
`

And by doing this it resolves my error. But being a newbie I wanted to make confirmation whether changes I did was right or wrong. Because I have bit of fear.
I took help from this blog:-

ShuahKhanLF

Yes this is the right change to make. You are clearing the CONFIG_MODULE_SIG_KEY and CONFIG_SYSTEM_TRUSTED_KEYS to indicate keys aren't used.

viveksahu26

Thanks @ShuahKhanLF ma'am for your confirmation !!

roxanan

Hi @ShuahKhanLF. I hope you can see this. I did not open a new request for this, but I will do so if needed.
I also ran into this issue because I am using a version of Ubuntu > 20.04. Do you think you can add this information for people who may run into this? A link here. Thank you!