#kernel-module #signature #sign #ko #linux-kernel #file #git

app sign-file

A CLI used to sign kernel module, alternative to sign file script of kernel

1 unstable release

0.1.0 Dec 28, 2022

#24 in #kernel-module

GPL-3.0-or-later

35KB
452 lines

Contains (ELF exe/lib, 23KB) qat_c62x.ko

sign-file

Rust version of sign tool for kernel module, see: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tree/scripts/sign-file.c

Command help

Command to sign kernel module file with x509 certificate

Usage: sign-file [OPTIONS] [COMMAND]

Commands:
  produce  Sign ko file as well as generate detached signature file (*.p7s)
  detach   Sign ko file with only generate detached signature file (*.p7s)
  raw      Append raw signature to ko file
  help     Print this message or the help of the given subcommand(s)

Options:
      --debug    
  -h, --help     Print help information
  -V, --version  Print version information

TODO

  1. Support key id
  2. Support digest algorithm

Dependencies

~4.5MB
~90K SLoC