On Mon, Jul 04, 2022 at 10:34:39PM +0200, Ansgar wrote: > As a further test I tried a different PKCS#11 module:
Could you try the same with "openssl cms"? Just to make sure it's not sign-file itself. The complete command line I use to create signatures for kernel modules is: | openssl cms -sign -binary -outform DER -signer "$SIGNING_KEY_FILE" -md sha256 -nocerts -noattr -nosmimecap -in "$filein" -out "$fileout" Bastian -- Immortality consists largely of boredom. -- Zefrem Cochrane, "Metamorphosis", stardate 3219.8