[ipxe-devel] imgverify error: CMS 0xda9b4 does not contain singedData

[Shao Miller]

On 1/8/2016 04:12, Kuniyasu Suzaki wrote:

> [...]
> openssl cms -sign -binary -noattr -in vm -signer codesign.crt -inkey
>  codesign.key -certfile CA/cacert.pem -inform DER -out vm.sig
> [...]
> Could not verify: Operation not supported (http://ipxe.org/3c2ae103)
>
> Please tell me how to set up imgverify.

Hooray for Knoppix Japanese Edition! :)

The error-message has a link: http://ipxe.org/3c2ae103 :

>  This error indicates that the file used for digital signature verification (e.g. with imgverify) was not a valid digital signature file.
>
> Things to try:
>
>     Check that the signature file is in DER format.
>
>     Check that the file is a valid signature file:
>
>       openssl cms -in signature_file.sig -inform DER -cmsout -print
>

Where is your -cmsout?

--
Shao Miller
C. E. O.
Synthetel Corporation
T: +1.9053927729
E: sha0.ipxe at synthetel.com
W: https://www.synthetel.com