[Bug 925479] New: failure of loading in-kernel X.509 certificate
http://bugzilla.suse.com/show_bug.cgi?id=925479 Bug ID: 925479 Summary: failure of loading in-kernel X.509 certificate Classification: openSUSE Product: openSUSE Distribution Version: 13.2 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-maintainers@forge.provo.novell.com Reporter: rommel@suse.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- After applying the pending release candidate of the kernel openSUSE Maintenance ID: 3606 openSUSE Review ID: 292232 Repository URL: http://download.opensuse.org/repositories/openSUSE:/Maintenance:/3606/openSU... I get the following message painted in red on my primary console: [1.708945] Problem loading in-kernel X.509 certificate (-19) However, I could not observe any run-time trouble (tested secure-boot with EFI, chained booting and direct booting with grub2). So it might be just a pretty-print issue - however a very visible one ;) It seems to be a regression of the release candidate: # uname -a; journalctl -b | grep X.509 Linux f127 3.16.6-2-desktop #1 SMP PREEMPT Mon Oct 20 13:47:22 UTC 2014 (feb42ea) x86_64 x86_64 x86_64 GNU/Linux Apr 01 09:57:24 linux-dcfu kernel: Loading compiled-in X.509 certificates Linux f127 3.16.7-7-desktop #1 SMP PREEMPT Wed Dec 17 18:00:44 UTC 2014 (762f27a) x86_64 x86_64 x86_64 GNU/Linux Apr 01 10:48:07 linux-dcfu kernel: Loading compiled-in X.509 certificates Linux f127 3.16.7-13-desktop #1 SMP PREEMPT Wed Mar 18 17:31:15 UTC 2015 (ba2afab) x86_64 x86_64 x86_64 GNU/Linux Apr 01 10:53:33 linux-dcfu kernel: Loading compiled-in X.509 certificates Apr 01 10:53:33 linux-dcfu kernel: Problem loading in-kernel X.509 certificate (-19) -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=925479
Heiko Rommel
http://bugzilla.suse.com/show_bug.cgi?id=925479
Marcus Meissner
http://bugzilla.suse.com/show_bug.cgi?id=925479
Marcus Meissner
http://bugzilla.suse.com/show_bug.cgi?id=925479
Marcus Meissner
http://bugzilla.suse.com/show_bug.cgi?id=925479
--- Comment #4 from Marcus Meissner
http://bugzilla.suse.com/show_bug.cgi?id=925479
Takashi Iwai
http://bugzilla.suse.com/show_bug.cgi?id=925479
--- Comment #6 from Heiko Rommel
So it takes only the project default *.crt, no UEFI certificate.
What is the expected run-time effect of that ? I am asking since - according to our test procedure for secure booting - secure-boot was reported as still working. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=925479
--- Comment #7 from Takashi Iwai
(In reply to Takashi Iwai from comment #5)
So it takes only the project default *.crt, no UEFI certificate.
What is the expected run-time effect of that ?
I am asking since - according to our test procedure for secure booting - secure-boot was reported as still working.
My wild guess is that it's just because you imported the same signature at the very first installation. Or I might miss something obvious... -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=925479
Takashi Iwai
http://bugzilla.suse.com/show_bug.cgi?id=925479
--- Comment #9 from Joey Lee
http://bugzilla.suse.com/show_bug.cgi?id=925479
Joey Lee
http://bugzilla.suse.com/show_bug.cgi?id=925479
e p
http://bugzilla.suse.com/show_bug.cgi?id=925479
Philipp -
http://bugzilla.suse.com/show_bug.cgi?id=925479
--- Comment #11 from Philipp -
Experiencing the same bug with the recent kernel-desktop-3.16.7-13.2 update.
Me too. (Mainboard ASRock 960GM/U3S3 FX) -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=925479
stephan stephan
http://bugzilla.suse.com/show_bug.cgi?id=925479
Andrei Borzenkov
The same with nvidia - X fails to start.
https://bugzilla.opensuse.org/show_bug.cgi?id=927018
Any workaround?
Rebuild driver for new kernel or boot previous version. If you do not know how to rebuild - remove RPM and reinstall. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=925479
--- Comment #22 from Heiko Rommel
(In reply to Andrey Polunkin from comment #16)
The same with nvidia - X fails to start.
https://bugzilla.opensuse.org/show_bug.cgi?id=927018
Any workaround?
Rebuild driver for new kernel or boot previous version. If you do not know how to rebuild - remove RPM and reinstall.
Please note that the NVIDIA (3rd party) drivers suffer from an unrelated problem which might be impacting your case - see https://bugzilla.suse.com/show_bug.cgi?id=925437 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=925479
Alexander König
http://bugzilla.suse.com/show_bug.cgi?id=925479
Andrea Celli
http://bugzilla.suse.com/show_bug.cgi?id=925479
--- Comment #26 from Alexander König
Thanks Alexander, but i'm not a smart user :-( How can i "Refresh the NVIDIA driver installation via YaST"?
I started Yast -> Software management -> Search Nvidia and i found i X11-videonvidia-G02 i xf86-video-nouveau i xf86-video-nv
Actually i was using the first one.
As possible actions i find: toggle Install delete update Taboo lock
Do i have to delete driver and install it again?
By the way, can i remove NV and Nouveau drivers?
bye, andrea
Hi Andrea, first of all I was lucky that some low resolution X windows system popped up instead of NVIDIA. Therefore I was still able to use the graphical YaST UI. Furthermore you seem to have an older NVIDIA version than I have. I selected in YaST to display the software source NVIDIA and then selected "update" for all as installed listed rpms. This should also be possible with the text version of YaST. If this doesn't work, delete the NVIDIA and check whether it then starts with NV or Noveau. Best regards, Alexander -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=925479
Marcus Meissner
participants (1)
-
bugzilla_noreply@novell.com