Error install kernel. Expired certificate 'CN=Fedora Secure Boot CA'

Problem

I faced a strange problem when installing a kernel from the bodhi repository with this error:

 Running scriptlet: kernel-core-6.0.17-300.fc37.x86_64                                                                                                                                          6/6 
dkms: running auto installation service for kernel 6.0.17-300.fc37.x86_64
Sign command: /lib/modules/6.0.17-300.fc37.x86_64/build/scripts/sign-file
Binary /lib/modules/6.0.17-300.fc37.x86_64/build/scripts/sign-file not found, modules won't be signed
Error! Your kernel headers for kernel 6.0.17-300.fc37.x86_64 cannot be found at /lib/modules/6.0.17-300.fc37.x86_64/build or /lib/modules/6.0.17-300.fc37.x86_64/source.
Please install the linux-headers-6.0.17-300.fc37.x86_64 package or use the --kernelsourcedir option to tell DKMS where it's located.
Error! One or more modules failed to install during autoinstall.
Refer to previous errors for more information.
 Failed. 
dkms: running auto installation service for kernel 6.0.17-300.fc37.x86_64
Sign command: /lib/modules/6.0.17-300.fc37.x86_64/build/scripts/sign-file
Binary /lib/modules/6.0.17-300.fc37.x86_64/build/scripts/sign-file not found, modules won't be signed
Error! Your kernel headers for kernel 6.0.17-300.fc37.x86_64 cannot be found at /lib/modules/6.0.17-300.fc37.x86_64/build or /lib/modules/6.0.17-300.fc37.x86_64/source.
Please install the linux-headers-6.0.17-300.fc37.x86_64 package or use the --kernelsourcedir option to tell DKMS where it's located.
Error! One or more modules failed to install during autoinstall.
Refer to previous errors for more information.
 Failed. 

Cause

Not yet known

Related Issues

The root certificate has clearly expired:

[key 1]
SHA1 Fingerprint: 7e:68:65:1d:52:68:5f:7b:f5:8e:a0:1d:78:4d:2f:90:d3:f4:0f:0a
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2574709492 (0x9976f2f4)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Fedora Secure Boot CA
        Validity
            Not Before: Dec  7 16:25:54 2012 GMT
            Not After : Dec  5 16:25:54 2022 GMT

Workarounds

Not found

The problem is a different one:

Binary /lib/modules/6.0.17-300.fc37.x86_64/build/scripts/sign-file not found, modules won't be signed

Did you upgrade the kernel-devel package?

[vek@newbox ~]$ rpm -qf /lib/modules/6.0.17-300.fc37.x86_64/build/scripts/sign-file
kernel-devel-6.0.17-300.fc37.x86_64
[vek@newbox ~]$

3 Likes

Thanks. The problem is really in the headers. DNF does not detect as a dependency.