Update secure boot certs: ca0 as Source2, boot0 as Source1

.gitignore

@@ -1,7 +1,6 @@
 SOURCES/BOOTAA64.CSV
 SOURCES/BOOTIA32.CSV
 SOURCES/BOOTX64.CSV
-SOURCES/almalinuxsecurebootca0.cer
 SOURCES/fbaa64.efi
 SOURCES/fbia32.efi
 SOURCES/fbx64.efi

SOURCES/shim.rpmmacros

@@ -131,7 +131,7 @@ version signed by the UEFI signing service.				\
 	else									\
 		cp -av %{-d*}/%{-b*}%{-a*}.efi %{-b*}%{-a*}-unsigned.efi	\
 	fi									\
-	%{expand:%%sign -i %{-b*}%{-a*}-unsigned.efi -o %{-b*}%{-a*}-signed.efi -n redhatsecureboot501 -a %{SOURCE2} -c %{SOURCE1} } \
+	%{expand:%%sign -i %{-b*}%{-a*}-unsigned.efi -o %{-b*}%{-a*}-signed.efi -n almalinuxsecureboot0 -a %{SOURCE2} -c %{SOURCE1} } \
 	%{nil}
 
 # -a <efiarch>

SPECS/shim.spec

@@ -18,7 +18,8 @@ ExcludeArch:	%{ix86}
 ExcludeArch:	%{arm}
 
 Source0:	shim.rpmmacros
-Source1:	almalinuxsecurebootca0.cer
+Source1:	almalinuxsecureboot0.cer
+Source2:	almalinuxsecurebootca0.cer
 
 # keep these two lists of sources synched up arch-wise.  That is 0 and 10
 # match, 1 and 11 match, ...