booting error when using code signing for linux kernel image

[apoorvmunshi]

Hello everyone ,
We solved the problem by entering the following commands:

openssl req -newkey rsa -keyout codesign.key -out codesign.req

openssl ca -config ca.cnf -extensions codesigning -in codesign.req -out codesign.crt

openssl cms -sign -binary -noattr -in vmlinuz -purpose any -signer codesign.crt -inkey codesign.key -certfile ca.crt -outform DER -out vmlinuz.sig


It seems that adding the purpose -any option solved the problem.

Thank you for your help.