> So this has to involve the firmware or keys or something somehow, I > guess.
Anything to get a meaningful error message would be interesting. I've tested "mokutil --set-verbosity true", but the huge hexdump isn't helpful when I cannot redirect that to some log file. I've read out the keys with both tool versions, but they are the same: $ sudo mokutil -l|grep -i fin SHA1 Fingerprint: 2b:b0:10:e2:4d:94:c6:32:24:58:89:ba:aa:9e:d0:f3:d5:ef:1f:68 $ md5deep -r -l .|sort 6a6d46b62c945328903e00474863e97b ./shim/15.8/MOK-0001.der 6a6d46b62c945328903e00474863e97b ./shim/16.1/MOK-0001.der 8e5e60dc6caf3e85b8d63dc6f65b8204 ./shim/15.8/pk 8e5e60dc6caf3e85b8d63dc6f65b8204 ./shim/16.1/pk 9d56b07daa774e3d7e2daa5439d72945 ./shim/15.8/db 9d56b07daa774e3d7e2daa5439d72945 ./shim/16.1/db bfc300863037f2e06abf101339a093ed ./shim/15.8/dbx bfc300863037f2e06abf101339a093ed ./shim/16.1/dbx f83ecb7d2aa918f1ec284e6fea8231be ./shim/15.8/kek f83ecb7d2aa918f1ec284e6fea8231be ./shim/16.1/kek github shim claims it is a "trivial application", which isn't true at all. Unfortunately, the release info for 16.1 is also too low-level and refers to a large number of bug-fixes but doesn't mention what features have been added/removed/changed and may be important. -- _______________________________________________ test mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
