From: Justin M. Forbes <[email protected]> Flip secureboot signature order
In preparation for dropping down to the single signature, we need to flip the signature order. Once a new shim is shipped, we can then drop down to a single signature. Signed-off-by: Justin M. Forbes <[email protected]> diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template index blahblah..blahblah 100644 --- a/redhat/kernel.spec.template +++ b/redhat/kernel.spec.template @@ -825,13 +825,13 @@ Source13: redhatsecureboot301.cer Source14: secureboot_s390.cer Source15: secureboot_ppc.cer -%define secureboot_ca_1 %{SOURCE10} -%define secureboot_ca_0 %{SOURCE11} +%define secureboot_ca_0 %{SOURCE10} +%define secureboot_ca_1 %{SOURCE11} %ifarch x86_64 aarch64 -%define secureboot_key_1 %{SOURCE12} -%define pesign_name_1 redhatsecureboot501 -%define secureboot_key_0 %{SOURCE13} -%define pesign_name_0 redhatsecureboot301 +%define secureboot_key_0 %{SOURCE12} +%define pesign_name_0 redhatsecureboot501 +%define secureboot_key_1 %{SOURCE13} +%define pesign_name_1 redhatsecureboot301 %endif %ifarch s390x %define secureboot_key_0 %{SOURCE14} @@ -850,12 +850,12 @@ Source11: redhatsecurebootca2.cer Source12: redhatsecureboot401.cer Source13: redhatsecureboot003.cer -%define secureboot_ca_1 %{SOURCE10} -%define secureboot_ca_0 %{SOURCE11} -%define secureboot_key_1 %{SOURCE12} -%define pesign_name_1 redhatsecureboot401 -%define secureboot_key_0 %{SOURCE13} -%define pesign_name_0 redhatsecureboot003 +%define secureboot_ca_0 %{SOURCE10} +%define secureboot_ca_1 %{SOURCE11} +%define secureboot_key_0 %{SOURCE12} +%define pesign_name_0 redhatsecureboot401 +%define secureboot_key_1 %{SOURCE13} +%define pesign_name_1 redhatsecureboot003 # released_kernel %endif -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2941 -- _______________________________________________ kernel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
