Unix & Linux

Questions tagged [signature]

Ask Question

The tag has no usage guidance.

41 questions
Newest
Active
Bountied
Unanswered
Filter by
Sorted by
Tagged with
0
votes
0answers
8 views

What does the “Certificates” section in seahorse do?

What does the "Certificates" / "System Trust" section of seahorse do? I am trying to sign a document in LibreOffice and the menu there uses the word "Certificate", so I am thinking that I need to ...
0
votes
1answer
48 views

Verify installed rpm packages signatures

I'm interested in checking the integrity of all installed rpm packages on the system. In case I have the rpm file itself, I'll run rpm -Kv PACKAGE.rpm, but what can I achieve the same goal if I the ...
0
votes
1answer
26 views

How do I know an open-sourced app is running the open source code it claims to be running? [duplicate]

You can argue that you can check the checksum of the application's package, but you are then trusting the developer to have compiled the right code and provided the right signature. Is there a way to ...
1
vote
1answer
2k views

Partition #3 contains a ext4 signature

When i use fdisk to create a new partition i get an error which says Partition #3 contains a ext4 signature Do you want to remove the signature? [Y]es/[N]o: This error is not a problem but i am ...
0
votes
0answers
903 views

“Required key not available” error when trying to load signed module

I made a module and compiled it with make modules_install. I ran these commands following this gist: openssl req -new -x509 -newkey rsa:2048 -keyout MOK.priv -outform DER -out MOK.der -nodes -subj "...
0
votes
0answers
525 views

Automatic module signing for distribution in Linux

I'm new to writing Linux modules (drivers) and digital signatures, so please correct me if any of my understanding is incorrect. When I run make modules_install on my module, I get the following ...
0
votes
0answers
67 views

minisig vs signify

I've recently came across the signify tool which is the OpenBSD solution to sign and verify files. Excluding GPG, I only knew about minisig to to achieve the same effect. I'm trying to figure out ...
7
votes
1answer
2k views

How to verify a kernel module signature?

When you compile a kernel source, you can choose to sign kernel modules using the CONFIG_MODULE_SIG* options. The modinfo tool should handle the task of verifying the module signature, but there has ...
1
vote
1answer
525 views

What happened to elfsign and elfverify?

In "Uninformed Research -- informative information for the uninformed." 2003 mentions a tool called elfsign and elfverify. This is a tool to checksum and sign an ELF binary. I can't find that tool in ...
2
votes
1answer
4k views

What is a vfat signature?

Recently, I have noticed that I cannot access my USB flash drive filesystem (it was of FAT type, as far as I can remember). Fedora did not mount it automatically and lsblk could not see the partition. ...
0
votes
1answer
652 views

How to detach-sign a file with a specific private key? || Why this fails?

I have a .tar.xz file which I would like to detach-sign using my gpg private key. The problem is, I have multiple of private keys imported to my keyring and need to choose, which one to use. ...
0
votes
1answer
737 views

dpkg-source: warning: failed to verify signature

System: Linux Mint 19 Cinnamon, based on Ubuntu 18.04. In this answer, I am being pointed at a different solution, other than installing directly from source. Since I haven't ever used dget, I must ...
1
vote
2answers
646 views

SUSE Linux Signature verification failed

When I code, build and sign .rpm file for SUSE Linux, it is signed successfully as follows: rpm --checksig -v xxx.rpm Header V4 RSA/SHA256 Signature, key ID 7936b039: OK Header SHA1 digest: OK ...
1
vote
0answers
593 views

How do I verify linux kernel signature with gpg?

Following the notes at the kernel.org site, but I cannot seem to verify the signature of the kernel. I tried to use the given script to handle it for me, but that has failed too. user@localhost ~ $ ...
1
vote
1answer
217 views

How do I verify https://files.devuan.org/devuan-devs.gpg

I am running Devuan Jessie. I want to install another Devuan Ascii from scratch. So I downloaded: https://files.devuan.org/devuan_ascii/installer-iso/devuan_ascii_2.0.0_amd64_netinst.iso https://...
0
votes
1answer
1k views

pacman -Syyu error: could not import key from Trusted User

DISTRIB_ID=ManjaroLinux DISTRIB_RELEASE=17.1.6 DISTRIB_CODENAME=Hakoila I installed manjaro on an old laptop today and am in the process of trying to update it. just using pacman -Syyu ...
1
vote
0answers
349 views

How to know which module is not trusted?

I am running Kubuntu 18.04. Now I notice my kernel log several lines having PKCS#7 signature not signed with a trusted key. Now I need to know which module (or whatever) causing this. Is there any way ...
0
votes
1answer
32 views

Evolution - imported signatures not used

Evolution 3.28.0-4 on Debian Testing. I did a restore of my evolution-config, copied ~/.config/evolution from backup to my machine. The email-accounts and all the emails are fine. For each account ...
5
votes
1answer
1k views

How do I prevent gpg from including SHA1?

apt-get is complaining that signatures are invalid and that the InRelease file is not signed (see Using Centos to sign .deb packages for background). On the server, I have verified using gpg that ...
6
votes
2answers
22k views

torbrowser signature verification fails - a glitch or an “attack”?

I wanted to try using TOR on my new Linux Mint 18.1 installation. So I apt-get installed torbrowser-launcher and tor, then ran torbrowser-launcher. It opened a dialog box and showed me it was ...
20
votes
1answer
13k views

Set default key in gpg for signing

I have created multiple keys using gpg. Whenever I try to sign any file, gpg automatically uses the first one I have created. How to set default key for signing in gpg. I don't want to delete/...
3
votes
2answers
3k views

How to add a third-party repo. and key in Debian?

I looked at another similar question about adding third-party repos. I am trying to add a third-party desktop IM client called riot . While the site gives link to the third-party it gives no ...
1
vote
1answer
157 views

Read Windows file digital signature time stamp in Ubuntu

I am trying to automate downloading the monthly Microsoft cab file for windows updates via my ubuntu server. I would like to verify the digital signature before marking it as good (last few months MS ...
-1
votes
3answers
253 views

Can I verify a file with GPG without downloading the key

To verify an .iso written on /dev/sdb with the signature my_signature.sig in gpg, I use dd if=/dev/sdb | gpg --keyid-format 0xlong --verify my_signature.sig - Is there a way to execute this command ...
2
votes
0answers
115 views

Loading an external module into a signed kernel?

The steam link is running a valve signed Linux kernel, however the sdk provided by valve states that attempting to replace theirs with an unsigned binary will render the device unbootable. Would ...
1
vote
3answers
17k views

How to encrypt a file with private key

I want to encrypt a file with a private key and decrypt it with a public key. A public key will be embedded in my app. So I want to have a guarantee that the file was created by me. How can I use gpg ...
4
votes
2answers
6k views

How can I extract Signatures data from a Windows `exe` file under Linux using cli

If you go to the VirusTotal link , there is a tab called file info(I think; mine is dutch). You'll see a header called "Authenticode signature block and FileVersionInfo properties" I want to ...
0
votes
2answers
258 views

analyzing rpm -Kv output

I am getting this output from rpm -Kv on one of my experimental packages: clime@coprbox ~/v4tests $ rpm -Kv signed10.rpm signed10.rpm: Header V3 RSA/SHA1 Signature, key ID f67e1676: NOKEY ...
2
votes
1answer
124 views

Kernel module version enforcement

Linux can be configured to require that kernel modules be digitally signed. On kernels built for embedded devices and consumer devices (i.e., tablets, smartphones, etc.), I can still see that this ...
1
vote
1answer
1k views

Sign a PDF file to verify integrity and validity

I've been asked to distribute electronic certificates (they were originally paper), in a PDF format, but I'd like to sign them with gpg or something similar so users can upload them to my site to ...
5
votes
1answer
433 views

Is there an unencrypted but signed filesystems?

I'm curious if there is a filesystem that's unencrypted, making it readable by anyone, but employs a digital signature scheme so as to require that writes be digitally signed. I suspect the answer ...
5
votes
1answer
2k views

Debian: GPG cannot fetch Linux Kernel key

I am in the process of recompiling the kernel on Debian. Following the instructions on kernel.org, the first step is to verify the signature. But GPG complains that it cannot find the public key: # ...
2
votes
2answers
2k views

How to sign already built Debian package?

I have a project with a custom build-system, so the Debian package is just one of a targets: I do it with dpkg-deb. But now I want to upload my package to some enterprise repo - and I need some files ...
1
vote
0answers
1k views

With opendkim, what might cause “signature doesn't verify” errors with Port25's DKIM email tester?

As far as I know, I've followed all the instructions in this post from Steve Jenkins about how to install and configure opendkim for sendmail under CentOS. http://stevejenkins.com/blog/2011/08/...
2
votes
1answer
603 views

Verifying Debian/Ubuntu packages integrity when booting from a read-only DVD?

Is there an easy way to boot a Debian-based Linux system from a read-only medium (say a Live Linux read-only DVD) and then use Debian's .deb checksums / signatures (?) to verify that the files ...
5
votes
2answers
10k views

Sign a module after kernel compilation

I've built a kernel in tmpfs, then I rebooted. Now I see a message when I compile the 3rd party module, NO SIGN [M] XXXX.ko How can I get it signed? The key pair generated during rpmbuild is lost ...
0
votes
1answer
1k views

Arch Linux steam installation failed due to signature error

I'm trying to install steam on my Arch and pacman said it can't install and showed the following error error: steam: signature from "Daniel Wallace <danielwallace@gtmanfred.com>" is invalid ...
10
votes
1answer
5k views

Cli verification of digitally signed email

I am Alice and I've received signed email from Bob. I use Web e-Mail client (e.g. GMail) and I see that one of attachements is smime.p7s. I've found option "show original message" and saved contents ...
4
votes
1answer
986 views

Getting a digital signature from an eToken/smart card into LibreOffice

I successfully managed to make use of digital signatures in LibreOffice Writer by following flatmtn.com/creating-pkcs12-certificates But now I want to use a digital certificate from an eToken/smart ...
1
vote
1answer
5k views

What means warning: rpmts_HdrFromFdno when installing from rpmfusion?

Installing a media player from rpmfusion (via yum) yields following output: Transaction Summary ================================================================================ Install 3 Packages (+...
15
votes
2answers
916 views

Why aren't the Fedora GPG keys signed?

Fedora uses GPG-keys for signing RPM packages and ISO checksum files. They list the keys in use (including fingerprints) on a web page. The web page is delivered via https. For example the checksum ...