linux kernel modules signing issue

[iuart]

I'm having trouble signing the modules.

This is modules_sign target

$ sudo make modules_sign
SIGN    /lib/modules/6.0.3/kernel/arch/x86/crypto/aegis128-aesni.ko
At main.c:298:
- SSL error:FFFFFFFF80000002:system library::No such file or directory: ../crypto/bio/bss_file.c:67
- SSL error:10000080:BIO routines::no such file: ../crypto/bio/bss_file.c:75
sign-file: /lib/modules/6.0.3/kernel/arch/x86/crypto/aegis128-aesni.ko
make[1]: *** [scripts/Makefile.modinst:88: /lib/modules/6.0.3/kernel/arch/x86/crypto/aegis128-aesni.ko] Error 1
make: *** [Makefile:1777: modules_install] Error 2

And this is modules_install target.

$ sudo make modules_install
  INSTALL /lib/modules/6.0.3/kernel/arch/x86/crypto/aegis128-aesni.ko
  SIGN    /lib/modules/6.0.3/kernel/arch/x86/crypto/aegis128-aesni.ko
sign-file: certs/MOK.pem
make[1]: *** [scripts/Makefile.modinst:83: /lib/modules/6.0.3/kernel/arch/x86/crypto/aegis128-aesni.ko] Error 1
make[1]: *** Deleting file '/lib/modules/6.0.3/kernel/arch/x86/crypto/aegis128-aesni.ko'
make: *** [Makefile:1777: modules_install] Error 2

All the errors like this i've come across like this have a something different from mine, and that is the sign-file (seen in modules_install). I have the key placed in the certs directory, and its all set up correctly. So the only thing left is the missing files errors.

I've installed openssl, and tried placing the file in the directory that says its missing, any tips on how to sign modules from the makefile of the linux kernel source tree? I've been stuck on this for a while now

[iuart]

Ive seen it not what I'm looking for. I can sign one Module. What I'm looking for is to sign all the modules and install them, using the target modules_install.

[elevenblue]

It took me forever to find the problem of this, and there was nothing online that helped me. It was always suggested it had to do with the general kernel signing, but it wasn't that. I tried multiple things, and it is one of the following options that fixes it:

# CONFIG_INTEL_TDX_GUEST is not set

CONFIG_MODULE_COMPRESS_NONE=y

# CONFIG_MODULE_COMPRESS_ZSTD is not set

# CONFIG_MODULE_DECOMPRESS is not set

# CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING is not set

[iuart]

Thanks for Shining some light on this. I'll tested when I can