背景
自建签名服务器时,模拟bingo构建时的签名命令进行签名:
openssl x509、openssl crl、hpm_signer、hpm_verify
bingo使用本地证书构建时,触发的签名没有报错,但是通过自己写的签名程序报错。
问题现象
签名程序会依次执行: openssl x509、openssl crl、hpm_signer、hpm_verify四条命令
执行hpm_signer命令时报错:
>> tool/hpm_signer -s ca/signer.pem -t ca/ts_signer.pem -T ca/tsa.cnf -i ./tmp/rootfs_TaiShan200_2280v217516092019787414070e0Z/rootfs_TaiShan200_2280v2.filelist -o ./tmp/rootfs_TaiShan200_2280v217516092019787414070e0Z/rootfs_TaiShan200_2280v2.filelist.cms
2025/07/04 06:06:42 tool/hpm_signer 命令执行失败: exit status 255, 错误输出: Using configuration from /usr/lib/ssl/openssl.cnf
Call command openssl ts -query -data .temp.cms.hash.der -cert -sha256 -no_nonce -out .temp.cms.hash.tsa failed
Sign ./tmp/rootfs_TaiShan200_2280v217516092019787414070e0Z/rootfs_TaiShan200_2280v2.filelist start
Sign ./tmp/rootfs_TaiShan200_2280v217516092019787414070e0Z/rootfs_TaiShan200_2280v2.filelist successfully(need timestamp sign more)
Parse cms data start
Found rsaEncryption data
Generate tsa request file
错误点是:
Call command openssl ts -query -data .temp.cms.hash.der -cert -sha256 -no_nonce -out .temp.cms.hash.tsa failed
诉求
hpm_signer命令出现这个错误代表什么意思,怎么解决