[Bookworm] [Secure Boot] Fix the updated path for extract-cert binary

[vivekrnv]

Why I did it

ERROR: LOCAL_EXTRACT_CERT=/usr/lib/linux-kbuild-6.1/scripts/extract-cert file does not exist
./scripts/signing_kernel_modules.sh: # Display Help
./scripts/signing_kernel_modules.sh -l <LINUX_KERNEL_VERSION> -c <PEM_CERT> -p <PEM_PRIVATE_KEY> -s <LOCAL_SIGN_FILE> -e <LOCAL_EXTRACT_CERT> -k <KERNEL_MODULES_DIR>
Sign kernel modules in <KERNEL_MODULES_DIR> using private & public keys.
Parameters description:
LINUX_KERNEL_VERSION
PEM_CERT                             public key (pem format)
PEM_PRIVATE_KEY                      private key (pem format)
LOCAL_SIGN_FILE                      path of the sign-file tool for signing Kernel Modules, if the value is empty it will used the sign-file installed in /usr/lib/linux-kbuild-<version>/scripts
LOCAL_EXTRACT_CERT                   path of the extract-cert tool for Extract X.509 certificate, if the value is empty it will used the extract-cert installed in /usr/lib/linux-kbuild-<version>/scripts
KERNEL_MODULES_DIR                   ******** directory of all the kernel modules to be sign by the script, if the value empty it will use the call script location as ********.
Runs examples:
1. ./scripts/signing_kernel_modules.sh -l 5.10.0-8-2 -c cert.pem -p priv-key.pem
2. ./scripts/signing_kernel_modules.sh -l 5.10.0-8-2 -c cert.pem -p priv-key.pem -k fs********-mellanox -e /usr/lib/linux-kbuild-5.10/scripts/extract-cert -s /usr/lib/linux-kbuild-5.10/scripts/sign-file
+ sudo LANG=C ch******** ./fs********-mellanox umount /proc
+ true
[  FAIL LOG END  ] [ target/sonic-mellanox.bin ]
make: *** [slave.mk:1377: target/sonic-mellanox.bin] Error 1
Makefile.work:612: recipe for target 'target/sonic-mellanox.bin' failed
make[1]: *** [target/sonic-mellanox.bin] Error 2
make[1]: Leaving directory '/builds2/sw-r2d2-bot/workspace/sonic_main/sonic'
Makefile:44: recipe for target 'target/sonic-mellanox.bin' failed
make: *** [target/sonic-mellanox.bin] Error 2

Work item tracking

• Microsoft ADO (number only):

How I did it

Updated the path according to the kernel version. extract-certs was moved from scripts/ to certs/ from kernel 5.17 gregkh/linux@340a025

How to verify it

Which release branch to backport (provide reason below if selected)

• 201811
• 201911
• 202006
• 202012
• 202106
• 202111
• 202205
• 202211
• 202305

Tested branch (Please provide the tested image version)

Description for the changelog

Link to config_db schema for YANG module changes

A picture of a cute animal (not mandatory but encouraged)

[saiarcot895]

/azpw run Azure.sonic-buildimage

[saiarcot895]

/azp run Azure.sonic-buildimage

[azure-pipelines]

Commenter does not have sufficient privileges for PR 17015 in repo sonic-net/sonic-buildimage

[vivekrnv]

/azpw run Azure.sonic-buildimage

[mssonicbld]

/AzurePipelines run Azure.sonic-buildimage

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[dgsudharsan]

@saiarcot895 Can we merge this?