diff --git a/SOURCES/almalinuxsecurebootca0.cer b/SOURCES/almalinuxsecurebootca0.cer new file mode 100644 index 0000000..6a4e99b Binary files /dev/null and b/SOURCES/almalinuxsecurebootca0.cer differ diff --git a/SOURCES/clsecureboot001.cer b/SOURCES/clsecureboot001.cer deleted file mode 100644 index ca9ce5d..0000000 Binary files a/SOURCES/clsecureboot001.cer and /dev/null differ diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index eeb27a8..fcf3e1f 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -347,6 +347,9 @@ Requires: rt-setup %endif %endif +Provides: almalinux(kernel-sig-key) = 202303 +Conflicts: shim-ia32 <= 15.6-1.el8.alma +Conflicts: shim-x64 <= 15.6-1.el8.alma # # List the packages used during the kernel build @@ -440,22 +443,22 @@ Source9: x509.genkey # Name of the packaged file containing signing key %ifarch ppc64le -%define signing_key_filename clsecureboot001.cer +%define signing_key_filename almalinuxsecurebootca0.cer %endif %ifarch s390x -%define signing_key_filename clsecureboot001.cer +%define signing_key_filename almalinuxsecurebootca0.cer %endif -Source10: clsecureboot001.cer +Source10: almalinuxsecurebootca0.cer %define secureboot_ca_0 %{SOURCE10} %define secureboot_ca_1 %{SOURCE10} %define secureboot_ca_2 %{SOURCE10} %define secureboot_key_0 %{SOURCE10} -%define pesign_name_0 clsecureboot001 +%define pesign_name_0 almalinuxsecurebootca0 %define secureboot_key_1 %{SOURCE10} -%define pesign_name_1 clsecureboot001 +%define pesign_name_1 almalinuxsecurebootca0 Source17: mod-blacklist.sh Source18: mod-sign.sh