On Thu, Jan 18, 2018 at 11:07:50AM +0100, Paolo Valente wrote: > > > > Il giorno 17 gen 2018, alle ore 12:08, David Howells <dhowe...@redhat.com> > > ha scritto: > > > > If this happened during boot, it could be that you have an X.509 cert for > > which the digest algorithm isn't built into the kernel. > > > > Yeah. I did look for such an inconsistency after that failure, but I > didn't find it, most certainly because of my lack of expertise on > this. > > After the success with rc8, I retried with rc7, repeating the same > streamline_config.pl procedure as the first time. Of course, by > Murphy's laws, rc7 worked this time. Sorry for making you waste > your time. Should this happen again, I won't be so superficial not to > make a backup of the offending config. >
No your report is still useful; I think there is a real kernel bug here, probably reproducible using add_key() with type "asymmetric", where the signature's hash algorithm isn't supported by the kernel. I'll try to put together a reproducer when I have a chance. Thanks! Eric
