Questions tagged [signature]
The signature tag has no usage guidance.
63
questions
0
votes
0
answers
7
views
How to make rEFInd check the signatures of initrd.img and refind.conf (for use with Secure Boot)?
GRUB has an option to check the signatures of initrd.img and grub.cfg (see How can I secure the initrd and grub.cfg using secure boot?) to ensure a continuous chain of trust during boot.
Can something ...
- 609
0
votes
0
answers
48
views
Request for help repairing output of apt update
This is the output of sudo apt update
I would appreciate it if someone could help me fix the problems, I'm only new to Linux.
I'm running (Linux kali 5.16.0-kali5-amd64 #1 SMP PREEMPT Debian 5.16.14-...
- 1
0
votes
0
answers
19
views
Load pk11 module with javaws/JRE
I need to use a java applet to cryptographically sign documents at work, but currently I'm not able to under linux.
I am using Fedora 35 with Gnome 41 and have managed to load the pk11 module into my ...
2
votes
1
answer
765
views
How to create a self-signed certificate for Okular PDF
I am at a loss. I want to create a self-signed certificate to sign PDFs with Okular. I have not found any step-by-step directions that work. I tried creating and installing a certificate, but Okular ...
- 69
1
vote
0
answers
13
views
verify live image in dracut
I have enabled EFI on the target host, enabled secure boot with my own PlatformKey, enabled ipxe bootstrap image where imgverify is used for checking the signature of the initrd. Now I have the ...
- 11
0
votes
1
answer
70
views
Arch linux: custom repo: File is corrupted (invalid or corrupted package (checksum))
I created a custom repository on my manjaro machine (to make a custom Manjaro ISO) with adding:
[manjaro-mate-aur-packages]
SigLevel = Never
Server = https://github.com/FreaxMATE/manjaro-mate-aur-...
- 61
0
votes
1
answer
52
views
GPG : no more signatures of a fresh imported key
SHORT
GPG doesn't get signatures of an imported public key anymore (with Ubuntu 20.04) while it did it 6 months ago (with Ubuntu 18.04).
I don't understand what's wrong.
LONG
On march, I followed this ...
0
votes
1
answer
117
views
GPG drops all non-self-signatures
I want to import/refresh a gpg key from a keyserver including all non self-signatures.
Whenever I try to do this gpg says, for example
gpg: key <number>: number of dropped non-self-signatures: ...
- 61
1
vote
3
answers
2k
views
Installing Sublime Text with apt fails due to missing public key
I am using the instructions linked below to setup apt to install sublime-text.
I am intentionally applying the method for connecting to third party repositories described on the Debian and ...
- 183
0
votes
1
answer
2k
views
Invalid signature for Kali Linux: The following signatures were invalid: EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository
I tried to do sudo apt update && sudo apt upgrade on the WSL Kali linux. But I would get this.
sudo apt update
Get:1 http://wlglam.fsmg.org.nz/kali kali-rolling InRelease [30.5 kB]
Err:1 http:/...
- 15
0
votes
0
answers
188
views
How to Digitally sign a Dynamic XFA PDF with PIV/Smartcard
I have a PDF with embedded Dynamic XFA fields, some of which are digital signature fields.
The only Linux PDF reader that I've found capable of diplaying this document is Master PDF Editor. All ...
- 383
1
vote
2
answers
389
views
What is the difference between a GPG signature and a detached signature?
We can sign a file with gpgp:
gpg -s file.pdf
Which generates a file signature file.pdf.gpg.
It is also possible to make a detached signature:
gpg -b file.pdf
Which generates file.pdf.sig.
I noticed ...
- 367
4
votes
2
answers
2k
views
How can I check if there is a signature associated with a deb package?
In rpm-based systems, we can easily see if there is a signature associated with an rpm file:
rpm -qpi <rpm-file.rpm> | grep -i signature
For .deb files, we can see the package information but ...
2
votes
1
answer
568
views
Custom signed Centos 7 PXE Secureboot with Shim and grub: invalid kernel signature
As the title suggests, I'm trying to set up a system that uses PXE boot to boot into CentOS7 with custom signing keys. This process is adapted from several guides but the gist of it is that I use grub ...
- 21
1
vote
0
answers
227
views
Parabola GNU/Linux-libre installation: problem with key
I'm trying to install Parabola GNU/Linux-libre (OpenRC) and I repeatedly get this error during pacstrap /mnt base elogind udev-init-scripts.
error: some-package: signature from "A Packager <a-...
- 327
1
vote
1
answer
168
views
Remove -- from signature in neomutt
The content of my signature file is
John Doe
but neomutt appends it to mails as
--
John Doe
How can I get rid of the --?
- 147
3
votes
1
answer
257
views
Black screen in Guix System installation
I have this problem to install Guix System:
After this, the screen turns black and nothing is displayed.
I first downloaded the Guix System, extracted the iso with this command: "unxz" and ...
- 109
1
vote
1
answer
913
views
BAD signature when installing specific package with apk after forced poweroff
Earlier I was playing around with my PinePhone running postmarketOS Edge (based on Alpine Linux Edge) and while installing gcc-go using apk via the command sudo apk add gcc-go the phone froze. As such,...
- 514
0
votes
1
answer
761
views
Trouble verifying linux, even after downloading key I get "No public key"
Following these instructions, I downloaded and unpacked the kernel.
https://priyachalakkal.wordpress.com/2013/01/19/verifying-digital-signature-using-gpg/
Then I tried to verify the signature but I ...
- 119
1
vote
1
answer
1k
views
Correct way to verify PGP signature in BASH script (pinning exact long fingerprint)
I have:
A file
A detached PGP signature of that file in ASCII armor format and
A 40-character (long-format) fingerprint identifying the one key that must have a valid signature
What is the correct ...
- 137
1
vote
1
answer
668
views
Verifying Signature of Debian 10.5 returns error "Can't check signature: No public key"
I'm trying to verify the SHA512 checksum for Debian 10.5-amd-netinst.iso as found on the official Debian CD-image site.
I'm running into the following error:
gpg --no-default-keyring --keyring Debian\ ...
- 13
4
votes
0
answers
1k
views
Looking for a way to sign PDFs
I am looking for a working method to sign PDFs using the certificate
from a signature card.
So what I need is either a program that signs PDFs in a way that is compatible
to what AcroRead does on ...
- 17.9k
1
vote
1
answer
776
views
rpm --addsign complains about "no secret key"
Running this command I get an error.
$ rpm --addsign ./kalzium-libs-19.12.3-1.fc33.i686.rpm
Enter pass phrase:
gpg: skipped "Evan Carroll": No secret key
gpg: signing failed: No secret key
Pass ...
- 22.5k
0
votes
0
answers
171
views
What does the "Certificates" section in seahorse do?
What does the "Certificates" / "System Trust" section of seahorse do?
I am trying to sign a document in LibreOffice and the menu there uses the word "Certificate", so I am thinking that I need to ...
- 781
2
votes
1
answer
2k
views
Verify installed rpm packages signatures
I'm interested in checking the integrity of all installed rpm packages on the system.
In case I have the rpm file itself, I'll run rpm -Kv PACKAGE.rpm, but what can I achieve the same goal if I the ...
0
votes
1
answer
94
views
How do I know an open-sourced app is running the open source code it claims to be running? [duplicate]
You can argue that you can check the checksum of the application's package, but you are then trusting the developer to have compiled the right code and provided the right signature.
Is there a way to ...
- 101
4
votes
1
answer
11k
views
Partition #3 contains a ext4 signature
When i use fdisk to create a new partition i get an error which says
Partition #3 contains a ext4 signature
Do you want to remove the signature? [Y]es/[N]o:
This error is not a problem but i am ...
- 783
0
votes
0
answers
4k
views
"Required key not available" error when trying to load signed module
I made a module and compiled it with make modules_install.
I ran these commands following this gist:
openssl req -new -x509 -newkey rsa:2048 -keyout MOK.priv -outform DER -out MOK.der -nodes -subj "...
- 101
0
votes
1
answer
3k
views
Automatic module signing for distribution in Linux
I'm new to writing Linux modules (drivers) and digital signatures, so please correct me if any of my understanding is incorrect.
When I run make modules_install on my module, I get the following ...
- 101
10
votes
1
answer
9k
views
How to verify a kernel module signature?
When you compile a kernel source, you can choose to sign kernel modules using the CONFIG_MODULE_SIG* options. The modinfo tool should handle the task of verifying the module signature, but there has ...
- 9,669
1
vote
1
answer
2k
views
What happened to elfsign and elfverify?
In "Uninformed Research -- informative information for the uninformed." 2003 mentions a tool called elfsign and elfverify. This is a tool to checksum and sign an ELF binary.
I can't find that tool in ...
- 22.5k
11
votes
1
answer
27k
views
What is a vfat signature?
Recently, I have noticed that I cannot access my USB flash drive filesystem (it was of FAT type, as far as I can remember). Fedora did not mount it automatically and lsblk could not see the partition. ...
- 265
5
votes
1
answer
2k
views
How to detach-sign a file with a specific private key? || Why this fails?
I have a .tar.xz file which I would like to detach-sign using my gpg private key.
The problem is, I have multiple of private keys imported to my keyring and need to choose, which one to use.
...
- 23.4k
1
vote
1
answer
2k
views
dpkg-source: warning: failed to verify signature
System: Linux Mint 19 Cinnamon, based on Ubuntu 18.04.
In this answer, I am being pointed at a different solution, other than installing directly from source.
Since I haven't ever used dget, I must ...
- 23.4k
2
votes
2
answers
3k
views
SUSE Linux Signature verification failed
When I code, build and sign .rpm file for SUSE Linux, it is signed successfully as follows:
rpm --checksig -v xxx.rpm
Header V4 RSA/SHA256 Signature, key ID 7936b039: OK
Header SHA1 digest: OK
...
- 21
2
votes
0
answers
1k
views
How do I verify linux kernel signature with gpg?
Following the notes at the kernel.org site, but I cannot seem to verify the signature of the kernel. I tried to use the given script to handle it for me, but that has failed too.
user@localhost ~ $ ...
- 475
1
vote
2
answers
402
views
How do I verify https://files.devuan.org/devuan-devs.gpg
I am running Devuan Jessie. I want to install another Devuan Ascii from scratch. So I downloaded:
https://files.devuan.org/devuan_ascii/installer-iso/devuan_ascii_2.0.0_amd64_netinst.iso
https://...
- 1,072
0
votes
2
answers
2k
views
pacman -Syyu error: could not import key from Trusted User
DISTRIB_ID=ManjaroLinux
DISTRIB_RELEASE=17.1.6
DISTRIB_CODENAME=Hakoila
I installed manjaro on an old laptop today and am in the process of trying to update it.
just using pacman -Syyu eventually ...
- 111
1
vote
0
answers
484
views
How to know which module is not trusted?
I am running Kubuntu 18.04. Now I notice my kernel log several lines having PKCS#7 signature not signed with a trusted key.
Now I need to know which module (or whatever) causing this. Is there any way ...
- 213
0
votes
1
answer
64
views
Evolution - imported signatures not used
Evolution 3.28.0-4 on Debian Testing.
I did a restore of my evolution-config, copied ~/.config/evolution from backup to my machine. The email-accounts and all the emails are fine.
For each account ...
7
votes
2
answers
4k
views
How do I prevent gpg from including SHA1?
apt-get is complaining that signatures are invalid and that the InRelease file is not signed (see Using Centos to sign .deb packages for background). On the server, I have verified using gpg that ...
- 1,687
7
votes
2
answers
28k
views
torbrowser signature verification fails - a glitch or an "attack"?
I wanted to try using TOR on my new Linux Mint 18.1 installation. So I apt-get installed torbrowser-launcher and tor, then ran torbrowser-launcher. It opened a dialog box and showed me it was ...
- 7,249
37
votes
2
answers
32k
views
Set default key in gpg for signing
I have created multiple keys using gpg.
Whenever I try to sign any file, gpg automatically uses the first one I have created. How to set default key for signing in gpg. I don't want to delete/...
- 471
13
votes
2
answers
12k
views
How to add a third-party repo. and key in Debian?
I looked at another similar question about adding third-party repos. I am trying to add a third-party desktop IM client called riot . While the site gives link to the third-party it gives no ...
- 10.8k
1
vote
1
answer
254
views
Read Windows file digital signature time stamp in Ubuntu
I am trying to automate downloading the monthly Microsoft cab file for windows updates via my ubuntu server.
I would like to verify the digital signature before marking it as good (last few months MS ...
- 11
-1
votes
3
answers
631
views
Can I verify a file with GPG without downloading the key
To verify an .iso written on /dev/sdb with the signature my_signature.sig in gpg, I use
dd if=/dev/sdb | gpg --keyid-format 0xlong --verify my_signature.sig -
Is there a way to execute this command ...
- 4,248
2
votes
0
answers
131
views
Loading an external module into a signed kernel?
The steam link is running a valve signed Linux kernel, however the sdk provided by valve states that attempting to replace theirs with an unsigned binary will render the device unbootable.
Would ...
- 283
3
votes
4
answers
28k
views
How to encrypt a file with private key
I want to encrypt a file with a private key and decrypt it with a public key. A public key will be embedded in my app. So I want to have a guarantee that the file was created by me. How can I use gpg ...
- 143
8
votes
2
answers
10k
views
How can I extract Signatures data from a Windows `exe` file under Linux using cli
If you go to the VirusTotal link , there is a tab called file info(I think; mine is dutch). You'll see a header called
"Authenticode signature block and FileVersionInfo properties"
I want to ...
- 537
0
votes
2
answers
397
views
analyzing rpm -Kv output
I am getting this output from rpm -Kv on one of my experimental packages:
clime@coprbox ~/v4tests $ rpm -Kv signed10.rpm
signed10.rpm:
Header V3 RSA/SHA1 Signature, key ID f67e1676: NOKEY
...
- 451