re: signature file error on Fedora 11

re: signature file error on Fedora 11

[Dave Brolley]

Hi,

Module signing has been introduced in the latest release. The first 
error oooks like what Frank said, your cache contained some unsigned 
modules. The message is really just a warning and can be ignored.

After clearing your cache, it looks like the certificate used for 
signing (and for running the stap server) has a problem. Try clearing 
your cache again and deleting /home/ppcteam/.systemtap/ssl. The next 
time you run stap, it should generate a new certificate for you.

We are working on improving the messages produced when NSS/NSPR calls fail.

Thanks,
Dave

Re: signature file error on Fedora 11

[Maynard Johnson]

Frank Ch. Eigler wrote:
> Maynard Johnson <maynardj@us.ibm.com> writes:
> 
>> ================================
>> Unable to obtain information on the signature file
>> /tmp/stapDBZIVB/stap_9bb36eb195372b67a8384d41263c1160_46713.ko.sgn.
>> Unknown NSS error: -5950.
>> ================================
> 
> /usr/include/nspr4/prerr.h:#define PR_FILE_NOT_FOUND_ERROR                  (-5950L)
> 
> Maybe your module cache was expected to contain the sgn (signature)
> file but didn't.  strace maybe?
I cleared out the module cache and re-tried.  I got some additional error messages:

===================================
Unable to find certificate with nickname stap-server in /home/ppcteam/.systemtap
/ssl/server.
Unknown NSS error: -5950.
Copy failed ("/tmp/staprcUQdd/stap_9f414ca0e37a4c5ee8804a2b9ce19985_46713.ko.sgn
" to "/home/ppcteam/.systemtap/cache/9f/stap_9f414ca0e37a4c5ee8804a2b9ce19985_46
713.ko.sgn"): No such file or directory
Unable to obtain information on the signature file /tmp/staprcUQdd/stap_9f414ca0
e37a4c5ee8804a2b9ce19985_46713.ko.sgn.
Unknown NSS error: -5950.
====================================

Using strace on this showed no syscall related to the "Unable to find certificate" error.  Any ideas?

Thanks.
-Maynard

> 
> See also PR10331.
> 
> - FChE

Re: signature file error on Fedora 11

[Frank Ch. Eigler]

Maynard Johnson <maynardj@us.ibm.com> writes:

> ================================
> Unable to obtain information on the signature file
> /tmp/stapDBZIVB/stap_9bb36eb195372b67a8384d41263c1160_46713.ko.sgn.
> Unknown NSS error: -5950.
> ================================

/usr/include/nspr4/prerr.h:#define PR_FILE_NOT_FOUND_ERROR                  (-5950L)

Maybe your module cache was expected to contain the sgn (signature)
file but didn't.  strace maybe?
 
See also PR10331.

- FChE

signature file error on Fedora 11

[Maynard Johnson]

Hi,
I just installed systemtap-0.9.8-1 rpm on Fedora 11 and tested my stapitrace 
rpm.  The test passes, but I'm getting some messages cluttering up the output 
that I had not seen before during early F11 development.  Here's what I'm seeing.

================================
Unable to obtain information on the signature file 
/tmp/stapDBZIVB/stap_9bb36eb195372b67a8384d41263c1160_46713.ko.sgn.
Unknown NSS error: -5950.
================================

What's causing this?

Thanks.
-Maynard