Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752656AbcD3IkN (ORCPT ); Sat, 30 Apr 2016 04:40:13 -0400 Received: from audible.transient.net ([24.143.126.66]:35992 "HELO audible.transient.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with SMTP id S1752347AbcD3IkK (ORCPT ); Sat, 30 Apr 2016 04:40:10 -0400 X-Greylist: delayed 439 seconds by postgrey-1.27 at vger.kernel.org; Sat, 30 Apr 2016 04:40:10 EDT Date: Sat, 30 Apr 2016 08:32:48 +0000 From: Jamie Heilman To: David Howells Cc: Herbert Xu , linux-crypto@vger.kernel.org, linux-kernel@vger.kernel.org Subject: v4.6-rc1 regression bisected, Problem loading in-kernel X.509 certificate (-2) Message-ID: <20160430083248.GA20775@cucamonga.audible.transient.net> Mail-Followup-To: David Howells , Herbert Xu , linux-crypto@vger.kernel.org, linux-kernel@vger.kernel.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.6.0 (2016-04-01) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 633 Lines: 17 I usually build my kernels to require module signatures and use automatic signing. As of v4.6-rc1 I'm getting this on boot: Problem loading in-kernel X.509 certificate (-2) I bisected that to commit d43de6c780a84def056afaf4fb3e66bdaa1efc00 (akcipher: Move the RSA DER encoding check to the crypto layer) For some reason after this commit my system keyring always ends up empty. I use the deb-pkg make target. My kernel config can be found at http://audible.transient.net/~jamie/k/modsign.config-4.6.0-rc5-guest Let me know if you need anything else. -- Jamie Heilman http://audible.transient.net/~jamie/