http://bugzilla.opensuse.org/show_bug.cgi?id=1129471 http://bugzilla.opensuse.org/show_bug.cgi?id=1129471#c18 c zg <czgf2v@163.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |czgf2v@163.com Hardware|Other |x86-64 OS|Other |Ubuntu --- Comment #18 from c zg <czgf2v@163.com> --- Could I ask same questions about this same problem on ubuntu 22 after upgrading from 20. I followed the instructions in this issue. I run ---------------------------- czg:~$ journalctl -b | grep "Loading X.509 certificate" -A 3 Mar 19 10:51:48 czg-Lenovo-Legion-R7000-2020 kernel: integrity: Loading X.509 certificate: UEFI:db Mar 19 10:51:48 czg-Lenovo-Legion-R7000-2020 kernel: integrity: Loaded X.509 cert 'Microsoft Windows Production PCA 2011: a92902398e16c49778cd90f99e4f9ae17c55af53' Mar 19 10:51:48 czg-Lenovo-Legion-R7000-2020 kernel: integrity: Loading X.509 certificate: UEFI:db Mar 19 10:51:48 czg-Lenovo-Legion-R7000-2020 kernel: integrity: Loaded X.509 cert 'Microsoft Corporation UEFI CA 2011: 13adbf4309bd82709c8cd54f316ed522988a1bd4' Mar 19 10:51:48 czg-Lenovo-Legion-R7000-2020 kernel: integrity: Loading X.509 certificate: UEFI:db Mar 19 10:51:48 czg-Lenovo-Legion-R7000-2020 kernel: integrity: Loaded X.509 cert 'OK Certificate: c8c73a37546046ab495c33f4d0856052' Mar 19 10:51:48 czg-Lenovo-Legion-R7000-2020 kernel: integrity: Loading X.509 certificate: UEFI:db Mar 19 10:51:48 czg-Lenovo-Legion-R7000-2020 kernel: integrity: Problem loading X.509 certificate -65 Mar 19 10:51:48 czg-Lenovo-Legion-R7000-2020 kernel: fbcon: Taking over console Mar 19 10:51:48 czg-Lenovo-Legion-R7000-2020 kernel: integrity: Error adding keys to platform keyring UEFI:db Mar 19 10:51:48 czg-Lenovo-Legion-R7000-2020 kernel: integrity: Loading X.509 certificate: UEFI:db Mar 19 10:51:48 czg-Lenovo-Legion-R7000-2020 kernel: integrity: Loaded X.509 cert 'EUJinn: 2d9ec14a26c9fcae420ef406a6e9492b' Mar 19 10:51:48 czg-Lenovo-Legion-R7000-2020 kernel: Console: switching to colour frame buffer device 240x67 Mar 19 10:51:48 czg-Lenovo-Legion-R7000-2020 kernel: integrity: Revoking X.509 certificate: UEFI:dbx -------------------------- here maybe only one key loaded fails(which is the one with 'Subject: CN=Joe's-Software-Emporium'. According to this link https://kompy.info/digital-signatures-for-kernel-modules-on-systems-running-... ���it is an certificate not specified a name, which is weird). in my 'mokutil --db' output the first two keys ���SHA1 Fingerprint��� same with the above attachment, the left three all use ���2.5.29.1��� OID here is the left three keys ------------------------------ [key 3] SHA1 Fingerprint: 20:04:e2:27:fe:e0:11:29:af:c7:d2:5b:f3:16:38:c9:b4:60:5f:e7 Certificate: Data: Version: 3 (0x2) Serial Number: (Negative)37:38:c5:c8:ab:9f:b9:54:b6:a3:cc:0b:2f:7a:9f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=OK Certificate Validity Not Before: Dec 31 16:00:00 2012 GMT Not After : Dec 31 23:59:59 2039 GMT Subject: CN=OK Certificate Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:bf:f4:67:ea:e3:01:e7:c3:44:ef:5e:ff:59:99: 4b:60:df:92:2b:51:87:a4:4a:bb:50:53:c2:7d:17: 67:0a:02:e6:c2:75:77:2c:23:b7:f2:a5:23:0a:40: 53:0a:d5:61:30:24:3f:d2:23:40:af:ff:79:a7:1b: 7e:1a:cd:96:2c:04:8f:87:da:4e:d6:09:71:b0:2d: 89:4f:28:a5:81:79:9b:f5:32:d9:23:2f:ec:7f:ab: 8e:d9:04:a0:23:44:98:b7:b5:a2:91:7f:d3:64:6d: ef:3d:7b:99:38:2b:81:ea:32:83:55:84:9c:2c:7b: 5e:af:3c:56:d6:b2:25:d6:5b:f0:82:62:05:e2:53: 3d:2d:d5:a2:db:44:a6:e1:8a:9a:19:f2:01:64:21: dd:26:66:7e:04:32:d1:09:b9:3b:8c:bb:49:ec:fb: 84:7c:fe:39:65:fb:f6:b7:9c:20:06:fb:d4:e7:2d: b5:0f:34:19:ce:19:8a:de:71:f4:6c:16:18:b9:b2: 6b:5f:8f:77:85:20:79:09:90:92:3a:50:3a:f5:1d: 63:02:1d:4b:57:54:89:8c:1a:a8:0a:21:b2:91:ca: 41:f1:19:aa:dd:47:f6:9e:e4:fd:84:a7:33:01:d2: e8:0a:2a:aa:64:4d:a4:b1:89:3a:de:53:94:18:5e: c8:db Exponent: 65537 (0x10001) X509v3 extensions: 2.5.29.1: 0A...x..ZG...d...@9...0.1.0...U....OK Certificate....:7T`F.I\3...`R Signature Algorithm: sha256WithRSAEncryption Signature Value: 87:37:8a:67:2e:2e:ec:f2:5d:ca:8e:c9:94:62:21:c1:99:96: 32:78:0f:37:e2:5f:41:9d:71:17:30:ac:48:1c:d9:e8:5a:fe: b6:e3:cb:99:a5:dd:d9:6d:46:6f:9e:1d:f9:11:d3:ef:05:07: d0:85:90:b1:07:38:ff:7e:64:4c:1d:74:a8:eb:a0:3e:44:35: 95:3d:8c:03:65:f2:89:59:c0:94:24:7a:f9:03:5a:8b:d5:af: 43:33:80:d4:0d:8d:f4:e7:7a:c8:60:7b:cc:fb:ec:79:3a:c4: 53:42:d1:1c:d6:55:28:c6:eb:11:7d:e0:99:63:15:f4:4b:d0: 15:aa:40:f4:35:46:be:bf:62:4c:a5:3d:fe:36:dc:7f:fd:01: 58:92:97:90:39:4e:16:7c:65:4c:ad:a7:a2:2f:63:88:f4:22: a6:9b:7f:e8:dd:3b:28:cc:9c:12:f2:99:e4:16:e7:9c:a6:12: 18:20:af:04:ec:9c:a7:3e:de:5a:b2:b3:c9:7d:e4:99:05:00: b4:c9:67:4a:bc:0f:2a:79:15:01:8a:6a:ca:74:f5:fc:ae:e2: 36:be:5e:59:f0:84:20:10:5f:5d:ee:46:27:98:79:57:85:2e: a7:a7:95:da:e6:24:7d:13:42:bf:fb:74:d0:ea:6c:aa:45:c3: 3b:ca:f9:78 [key 4] SHA1 Fingerprint: c3:5e:b2:db:6d:29:e3:ea:04:86:a2:bf:f1:8e:27:78:e6:72:b0:c7 Certificate: Data: Version: 3 (0x2) Serial Number: 54:01:7d:cb:80:17:e7:b0:4c:79:3b:4e:fc:5e:13:67 Signature Algorithm: sha1WithRSA Issuer: CN=Root Agency Validity Not Before: Jul 21 02:07:33 2016 GMT Not After : Dec 31 23:59:59 2039 GMT Subject: CN=Joe's-Software-Emporium Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:e7:36:da:6a:86:75:07:de:03:f9:a1:f9:26:51: 56:2c:40:6d:1b:ed:24:c5:fb:63:10:4a:9a:a7:d1: a5:df:43:f5:00:39:92:34:c4:06:ac:46:36:4b:8a: 07:af:c2:03:80:70:62:06:58:08:83:da:4e:ed:9d: 60:51:91:3f:74:42:29:f8:d9:20:af:b7:e7:e4:b4: d2:1f:b2:42:e6:25:f8:77:a6:bf:09:2a:94:22:52: 6f:5e:6a:aa:8a:f9:cb:01:2f:79:9a:91:20:0a:9c: 47:89:df:24:e9:a0:46:ef:b5:2c:c9:8d:99:c8:e3: 5e:63:a7:bc:13:0f:59:9a:64:5d:00:12:20:18:27: 55:cf:02:5c:73:1c:82:21:7f:f1:08:89:c0:3d:ac: da:3e:d3:89:6b:f6:7d:ff:3c:6d:cc:ac:99:e9:7d: ab:3a:32:f6:38:39:3d:e4:2e:c3:69:21:f6:35:9a: 5f:f1:24:32:b7:31:c3:fc:e2:4a:4d:fb:e9:42:fb: e3:2e:3f:8d:f2:f2:54:14:10:b0:88:b1:27:ba:12: c5:ae:3b:f4:da:5c:c1:9b:1b:09:64:73:53:af:1d: 32:92:09:39:6a:de:de:ea:97:6c:fc:ca:81:84:1f: b3:97:b3:e6:09:97:ff:8c:e4:16:22:d5:00:9b:bd: 9a:55 Exponent: 65537 (0x10001) X509v3 extensions: 2.5.29.1: 0>.....-...O..a!..dc..0.1.0...U....Root Agency...7l...d......\5. Signature Algorithm: sha1WithRSA Signature Value: 62:97:da:8b:8f:75:0e:40:05:08:a5:e3:62:db:bc:09:35:7e: 4c:62:1c:75:9f:2d:44:38:01:7d:4d:a1:03:2c:29:1b:9e:3c: 17:93:e9:72:69:c1:7b:a0:87:6b:d4:f5:da:17:0f:0c:d0:0a: 37:bc:55:93:f2:0e:16:1a:51:72 [key 5] SHA1 Fingerprint: c6:28:29:2a:62:fd:4a:f7:2a:63:be:bf:65:dc:59:10:45:c6:fa:ea Certificate: Data: Version: 3 (0x2) Serial Number: 2d:9e:c1:4a:26:c9:fc:ae:42:0e:f4:06:a6:e9:49:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=Trust - Lenovo Certificate Validity Not Before: Oct 29 09:41:52 2019 GMT Not After : Dec 31 23:59:59 2039 GMT Subject: CN=EUJinn Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:e0:62:0c:15:21:8a:16:36:4b:a9:93:9d:a4:ea: 97:9d:21:c3:2d:cd:ab:6b:a6:68:40:2c:05:a3:74: 91:a4:fb:01:61:95:96:0c:5e:ca:97:95:49:90:f6: f4:96:6b:02:c2:b4:fe:3b:17:f0:af:7f:28:5e:41: cd:b2:71:8d:86:4d:76:ed:70:52:c5:63:eb:ea:5d: b4:88:82:70:ba:53:1a:76:93:75:fa:63:58:98:52: c4:8b:65:10:74:21:40:b4:fb:f3:c1:14:6d:c7:40: 30:a3:5d:43:9b:50:fb:3b:cc:c6:8e:9d:05:7d:b5: 20:7a:c8:8d:93:93:88:ce:8e:01:94:68:6f:d2:a0: 16:70:ae:c6:99:25:a6:da:09:63:98:37:7c:29:f3: 0b:46:5a:3b:77:1e:cf:73:59:b8:8b:82:34:f8:45: 77:27:43:0b:8f:c6:bb:6a:43:75:83:68:d5:21:e3: 33:eb:7a:90:16:ff:fc:6c:e7:ad:d2:89:6d:d1:29: 06:d3:f0:cf:61:60:34:b8:8e:6d:8e:03:cd:ab:d7: 7d:3d:b5:38:2d:9e:62:24:53:c8:b1:1f:49:93:7e: 0f:79:61:db:42:dd:8e:43:1b:09:3b:47:a1:50:cf: 4f:87:5d:54:16:85:ec:97:cc:f8:d9:27:aa:61:c5: c3:ed Exponent: 65537 (0x10001) X509v3 extensions: 2.5.29.1: 0M..b.`~.....0...-.".'0%1#0!..U....Trust - Lenovo Certificate..^...k...@.`F ... Signature Algorithm: sha256WithRSAEncryption Signature Value: 5f:7d:ac:4a:e6:51:76:4f:85:08:f7:bb:fa:22:92:9c:86:46: 1f:d5:6d:3a:5b:d0:f7:56:6e:a1:e8:c0:d4:79:19:c5:93:cc: fd:27:99:1a:72:41:0b:fd:45:e1:6d:b2:bd:d8:80:c3:31:68: ea:1e:ec:ad:31:f1:1f:b8:75:e3:61:b7:8d:00:a5:29:79:02: a0:ab:57:45:4a:1a:c2:82:1a:a8:c3:ea:f3:d4:15:09:78:9e: 86:60:84:e6:b4:37:5a:03:45:7a:a6:e1:74:c2:0f:d1:1b:fd: 44:ae:31:d5:ec:61:9a:c0:81:1a:2b:c1:ba:6f:3d:47:83:55: 44:d1:fc:f4:6c:3a:dd:d7:fe:30:88:0a:89:6a:c6:d2:71:6f: 2c:2b:eb:0d:c1:9c:52:5f:de:d3:4f:61:d7:62:9a:e8:c0:9d: 01:a6:75:e5:0b:93:75:45:9b:18:d8:ab:32:c4:9c:fb:1a:24: 9e:55:90:bd:4d:bd:5b:03:5a:d7:1f:82:d8:14:59:03:cd:56: 8e:0b:61:8d:b1:9f:e8:aa:a4:41:4c:b2:9a:80:be:48:a3:61: 69:34:ee:b7:18:55:57:c0:23:41:64:bd:5e:73:df:23:f1:8f: 9e:65:b2:a0:f2:c8:4a:cc:c2:e9:db:a8:9c:a7:b3:40:0d:e7: 9e:ea:3d:f8 ------------------------------ So why does this situation happen? I found a similar closed topic https://forums.linuxmint.com/viewtopic.php?t=363303 in linux mint forum ��� which recommends to send 'inxi -Fxxxrz' log, here is ---------------------------------------- System: Kernel: 5.15.0-67-generic x86_64 bits: 64 compiler: gcc v: 11.3.0 Desktop: GNOME 42.5 tk: GTK 3.24.33 wm: gnome-shell dm: GDM3 42.0 Distro: Ubuntu 22.04.2 LTS (Jammy Jellyfish) Machine: Type: Laptop System: LENOVO product: 82B6 v: Lenovo Legion R7000 2020 serial: <superuser required> Chassis: type: 10 v: Lenovo Legion R7000 2020 serial: <superuser required> Mobo: LENOVO model: LNVNB161216 v: SDK0L77769 WIN serial: <superuser required> UEFI: LENOVO v: EUCN31WW date: 01/01/2021 Battery: ID-1: BAT0 charge: 52.9 Wh (100.0%) condition: 52.9/60.0 Wh (88.1%) volts: 17.4 min: 15.4 model: SMP L19M4PC0 type: Li-poly serial: <filter> status: Charging cycles: 275 Device-1: hidpp_battery_0 model: Logitech G304 Lightspeed Wireless Gaming Mouse serial: <filter> charge: 100% (should be ignored) rechargeable: yes status: Discharging CPU: Info: 8-core model: AMD Ryzen 7 4800H with Radeon Graphics bits: 64 type: MT MCP smt: enabled arch: Zen 2 rev: 1 cache: L1: 512 KiB L2: 4 MiB L3: 8 MiB Speed (MHz): avg: 1411 high: 1653 min/max: 1400/2900 boost: enabled cores: 1: 1401 2: 1393 3: 1397 4: 1396 5: 1397 6: 1398 7: 1398 8: 1397 9: 1398 10: 1653 11: 1395 12: 1392 13: 1397 14: 1396 15: 1397 16: 1384 bogomips: 92626 Flags: avx avx2 ht lm nx pae sse sse2 sse3 sse4_1 sse4_2 sse4a ssse3 svm Graphics: Device-1: NVIDIA TU117M vendor: Lenovo driver: nvidia v: 510.108.03 pcie: speed: 2.5 GT/s lanes: 8 ports: active: none off: eDP-1 empty: DP-1,HDMI-A-1 bus-ID: 01:00.0 chip-ID: 10de:1f99 class-ID: 0300 Device-2: Syntek Integrated Camera type: USB driver: uvcvideo bus-ID: 1-3:2 chip-ID: 174f:244c class-ID: 0e02 serial: <filter> Display: x11 server: X.Org v: 1.21.1.3 compositor: gnome-shell driver: X: loaded: nvidia unloaded: fbdev,modesetting,nouveau,vesa gpu: nvidia display-ID: :1 screens: 1 Screen-1: 0 s-res: 1920x1080 s-dpi: 96 s-size: 508x286mm (20.0x11.3") s-diag: 583mm (23") Monitor-1: DP-2 res: 1920x1080 hz: 60 dpi: 142 size: 344x194mm (13.5x7.6") diag: 395mm (15.5") OpenGL: renderer: NVIDIA GeForce GTX 1650/PCIe/SSE2 v: 4.6.0 NVIDIA 510.108.03 direct render: Yes Audio: Device-1: NVIDIA driver: snd_hda_intel v: kernel pcie: speed: 8 GT/s lanes: 8 bus-ID: 01:00.1 chip-ID: 10de:10fa class-ID: 0403 Device-2: AMD Raven/Raven2/FireFlight/Renoir Audio Processor vendor: Lenovo driver: N/A pcie: speed: 16 GT/s lanes: 16 bus-ID: 05:00.5 chip-ID: 1022:15e2 class-ID: 0480 Device-3: AMD Family 17h HD Audio vendor: Lenovo driver: snd_hda_intel v: kernel pcie: speed: 16 GT/s lanes: 16 bus-ID: 05:00.6 chip-ID: 1022:15e3 class-ID: 0403 Sound Server-1: ALSA v: k5.15.0-67-generic running: yes Sound Server-2: PulseAudio v: 15.99.1 running: yes Sound Server-3: PipeWire v: 0.3.48 running: yes Network: Device-1: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet vendor: Lenovo driver: r8169 v: kernel pcie: speed: 2.5 GT/s lanes: 1 port: 1000 bus-ID: 03:00.0 chip-ID: 10ec:8168 class-ID: 0200 IF: eno1 state: down mac: <filter> Device-2: Intel Wi-Fi 6 AX200 driver: iwlwifi v: kernel pcie: speed: 5 GT/s lanes: 1 bus-ID: 04:00.0 chip-ID: 8086:2723 class-ID: 0280 IF: wlp4s0 state: up mac: <filter> Bluetooth: Device-1: Intel AX200 Bluetooth type: USB driver: btusb v: 0.8 bus-ID: 3-3:3 chip-ID: 8087:0029 class-ID: e001 Report: hciconfig ID: hci0 rfk-id: 2 state: down bt-service: enabled,running rfk-block: hardware: no software: yes address: <filter> Drives: Local Storage: total: 476.94 GiB used: 58.21 GiB (12.2%) ID-1: /dev/nvme0n1 vendor: Samsung model: MZVLB512HBJQ-000L2 size: 476.94 GiB speed: 31.6 Gb/s lanes: 4 type: SSD serial: <filter> rev: 3L1QEXF7 temp: 33.9 C scheme: GPT Partition: ID-1: / size: 76.6 GiB used: 58.18 GiB (76.0%) fs: ext4 dev: /dev/nvme0n1p7 ID-2: /boot/efi size: 96 MiB used: 36.6 MiB (38.2%) fs: vfat dev: /dev/nvme0n1p1 Swap: ID-1: swap-1 type: file size: 2 GiB used: 0 KiB (0.0%) priority: -2 file: /swapfile Sensors: System Temperatures: cpu: N/A mobo: N/A gpu: nvidia temp: 34 C Fan Speeds (RPM): N/A Repos: Packages: 3730 apt: 3714 snap: 16 Active apt repos in: /etc/apt/sources.list 1: deb http://mirrors.aliyun.com/ubuntu/ jammy main restricted universe 2: deb-src http://mirrors.aliyun.com/ubuntu/ jammy main restricted universe 3: deb http://mirrors.aliyun.com/ubuntu/ jammy-security main restricted universe 4: deb-src http://mirrors.aliyun.com/ubuntu/ jammy-security main restricted universe 5: deb http://mirrors.aliyun.com/ubuntu/ jammy-updates main restricted universe 6: deb-src http://mirrors.aliyun.com/ubuntu/ jammy-updates main restricted universe 7: deb http://mirrors.aliyun.com/ubuntu/ jammy-backports main restricted universe 8: deb-src http://mirrors.aliyun.com/ubuntu/ jammy-backports main restricted universe 9: deb [arch=amd64] https://repo.vivaldi.com/archive/deb/ stable main 10: deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-16 main 11: deb-src http://apt.llvm.org/jammy/ llvm-toolchain-jammy-16 main No active apt repos in: /etc/apt/sources.list.d/backports.list Active apt repos in: /etc/apt/sources.list.d/microsoft-edge.list 1: deb [arch=amd64] https://packages.microsoft.com/repos/edge/ stable main Active apt repos in: /etc/apt/sources.list.d/tor.list 1: deb [arch=amd64 signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org focal main 2: deb-src [arch=amd64 signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org focal main Active apt repos in: /etc/apt/sources.list.d/ubuntu-support-team-ubuntu-gdb-jammy.list 1: deb https://ppa.launchpadcontent.net/ubuntu-support-team/gdb/ubuntu/ jammy main Active apt repos in: /etc/apt/sources.list.d/vscode.list 1: deb [arch=amd64,arm64,armhf signed-by=/etc/apt/trusted.gpg.d/packages.microsoft.gpg] https://packages.microsoft.com/repos/code stable main No active apt repos in: /etc/apt/sources.list.d/webupd8team-ubuntu-y-ppa-manager-focal.list Info: Processes: 412 Uptime: 56m wakeups: 4 Memory: 15.5 GiB used: 4.75 GiB (30.6%) Init: systemd v: 249 runlevel: 5 Compilers: gcc: 11.3.0 alt: 10/11/12/8/9 clang: 14.0.0-1ubuntu1 Shell: Bash v: 5.1.16 running-in: gnome-terminal inxi: 3.3.13 ---------------------------------------- Hope these information helps you solve with my question. -- You are receiving this mail because: You are on the CC list for the bug.