A patched version of the Linux kernel sign-file utility for signing
kernel modules. Supports both file-based private keys and PKCS#11
hardware tokens (YubiKey, eToken) via the PKCS11_MODULE_PATH
environment variable.
Kernel module signing tool with PKCS#11 hardware token support. Based on upstream Linux kernel scripts/sign-file.c (torvalds/linux master) with the following patch: - Added PKCS11_MODULE_PATH env var to explicitly set the OpenSSL ENGINE MODULE_PATH before initialization, bypassing p11-kit module discovery Supports both file-based private keys and PKCS#11 URIs (YubiKey, eToken). Builds against system OpenSSL, installs to /usr/bin/al-sign-file. |
||
|---|---|---|
| al-sign-file.spec | ||
| sign-file.c | ||
| ssl-common.h | ||