[Bug binutils/21680] New: unable to sign .efi image generated by objcopy

[sharath.kurudi at gmail dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=21680

            Bug ID: 21680
           Summary: unable to sign .efi image generated by objcopy
           Product: binutils
           Version: 2.28
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: sharath.kurudi at gmail dot com
  Target Milestone: ---

Created attachment 10224
  --> https://sourceware.org/bugzilla/attachment.cgi?id=10224&action=edit
Makefile to generate efi image using objcopy

I created a .efi image using the Makefile script attached. I tried to sign the
image using sbsign tool with keys generated from openssl tool

"openssl req -newkey rsa:2048 -nodes -keyout db.key -new -x509 -sha256 -days
3650 -subj "" -out db.crt"

sbsign command

sbsign --key db.key --cert db.crt --output hello_signed.efi hello.efi.

I get the following error

warning: data remaining[115200 vs 125743]: gaps between PE/COFF sections?

hello.efi does not get executed in a secure boot mode. 

objcopy command
================

objcopy -j .text -j .sdata -j .data -j .dynamic -j .dynsym  -j .rel -j .rela -j
.reloc --target=efi-app-x86_64 hello.so hello.efi

-- 
You are receiving this mail because:
You are on the CC list for the bug.