kmodsign - Kernel module signing tool
kmodsign [-dpkD] <hash algo> <key> <x509> <module> [<dest>]
Sign a kernel module image for use with an enforcing kernel.
save a copy of the p7s signature (.p7s)
produce a detached signature file (.p7s) only
produce a full detached signature block (may be cat'd onto the end of a module)
switch to using keyid for identification