CICD 自建签名服务器报openssl命令执行错误

背景

自建签名服务器时,模拟bingo构建时的签名命令进行签名:
openssl x509、openssl crl、hpm_signer、hpm_verify

bingo使用本地证书构建时,触发的签名没有报错,但是通过自己写的签名程序报错。

问题现象

签名程序会依次执行: openssl x509、openssl crl、hpm_signer、hpm_verify四条命令

执行hpm_signer命令时报错:

>>  tool/hpm_signer -s ca/signer.pem -t ca/ts_signer.pem -T ca/tsa.cnf -i ./tmp/rootfs_TaiShan200_2280v217516092019787414070e0Z/rootfs_TaiShan200_2280v2.filelist -o ./tmp/rootfs_TaiShan200_2280v217516092019787414070e0Z/rootfs_TaiShan200_2280v2.filelist.cms
2025/07/04 06:06:42 tool/hpm_signer 命令执行失败: exit status 255, 错误输出: Using configuration from /usr/lib/ssl/openssl.cnf
Call command openssl ts -query -data .temp.cms.hash.der -cert -sha256 -no_nonce -out .temp.cms.hash.tsa failed
Sign ./tmp/rootfs_TaiShan200_2280v217516092019787414070e0Z/rootfs_TaiShan200_2280v2.filelist start
Sign ./tmp/rootfs_TaiShan200_2280v217516092019787414070e0Z/rootfs_TaiShan200_2280v2.filelist successfully(need timestamp sign more)
Parse cms data start
Found rsaEncryption data
Generate tsa request file

错误点是:

Call command openssl ts -query -data .temp.cms.hash.der -cert -sha256 -no_nonce -out .temp.cms.hash.tsa failed

诉求

hpm_signer命令出现这个错误代表什么意思,怎么解决