Welcome to the Linux Foundation Forum!

Need someone confirmation for the changes I did

When I tried to run make oldconfig or make all recieve below error:
make[1]: *** No rule to make target 'debian/canonical-certs.pem', needed by 'certs/x509_certificate_list'. Stop. make: *** [Makefile:1809: certs] Error 2

To resolve this I find an solution and followed one of the blog(https://askubuntu.com/questions/1329538/compiling-the-kernel-5-11-11) for help:-

`openssl req -x509 -newkey rsa:4096 -keyout certs/mycert.pem -out certs/mycert.pem -nodes -days 3650

CONFIG_MODULE_SIG_KEY="certs/mycert.pem" CONFIG_SYSTEM_TRUSTED_KEYRING=y CONFIG_SYSTEM_TRUSTED_KEYS="certs/mycert.pem" CONFIG_SYSTEM_EXTRA_CERTIFICATE=y CONFIG_SYSTEM_EXTRA_CERTIFICATE_SIZE=4096 CONFIG_SECONDARY_TRUSTED_KEYRING=y CONFIG_SYSTEM_BLACKLIST_KEYRING=y CONFIG_SYSTEM_BLACKLIST_HASH_LIST=""
`

And by doing this it resolves my error. But being a newbie I wanted to make confirmation whether changes I did was right or wrong. Because I have bit of fear.
I took help from this blog:-

Welcome!

It looks like you're new here. Sign in or register to get started.
Sign In

Comments

  • Yes this is the right change to make. You are clearing the CONFIG_MODULE_SIG_KEY and CONFIG_SYSTEM_TRUSTED_KEYS to indicate keys aren't used.

  • Thanks @ShuahKhanLF ma'am for your confirmation !!

  • Posts: 1

    Hi @ShuahKhanLF. I hope you can see this. I did not open a new request for this, but I will do so if needed.
    I also ran into this issue because I am using a version of Ubuntu > 20.04. Do you think you can add this information for people who may run into this? A link here. Thank you!

Welcome!

It looks like you're new here. Sign in or register to get started.
Sign In

Welcome!

It looks like you're new here. Sign in or register to get started.
Sign In

Categories

Upcoming Training