Verified Commit 73d1c4fa authored by Sherif Nagy's avatar Sherif Nagy
Browse files

Updating Rocky CA

parent 1af4043d
......@@ -6,6 +6,19 @@ delete {
file: "SOURCES/redhatsecurebootca5.cer"
}
delete {
file: "SOURCES/sbat.redhat.csv"
}
add {
file: "ROCKY/_supporting/sbat.rocky.csv"
}
patch {
file: "ROCKY/_supporting/0001-Adding-rocky-linux-CA.patch"
}
spec_change {
search_and_replace{
any: true
......@@ -14,13 +27,19 @@ spec_change {
n: 1
}
search_and_replace {
field: "Source1"
find: "redhatsecurebootca5.cer"
replace: "rocky-root-ca.der"
n: 1
file {
name: "redhatsecurebootca5.cer"
type: Source
delete: true
}
file {
name: "sbat.redhat.csv"
type: Source
delete: true
}
changelog {
author_name: "Sherif Nagy"
author_email: "sherif@rockylinux.org"
......
From e2eb8ec551b7d0ddba4ef8382db20616b927ad90 Mon Sep 17 00:00:00 2001
From: Sherif Nagy <sherif@rockylinux.org>
Date: Thu, 27 May 2021 00:03:11 +0100
Subject: [PATCH] Adding rocky linux CA
---
SPECS/shim-unsigned-x64.spec | 12 +++++++-----
1 file changed, 7 insertions(+), 5 deletions(-)
diff --git a/SPECS/shim-unsigned-x64.spec b/SPECS/shim-unsigned-x64.spec
index 32435b7..4696adc 100644
--- a/SPECS/shim-unsigned-x64.spec
+++ b/SPECS/shim-unsigned-x64.spec
@@ -33,6 +33,8 @@ Source2: %{dbxfile}
Source3: sbat.redhat.csv
Source100: shim-find-debuginfo.sh
+Source90000: sbat.rocky.csv
+Source90001: rocky-root-ca.der
Patch0001: 0001-Fix-a-broken-file-header-on-ia32.patch
@@ -99,7 +101,7 @@ git config --unset user.email
git config --unset user.name
mkdir build-%{efiarch}
mkdir build-%{efialtarch}
-cp %{SOURCE3} data/
+cp %{SOURCE90000} data/
%build
COMMITID=$(cat commit)
@@ -107,8 +109,8 @@ MAKEFLAGS="TOPDIR=.. -f ../Makefile COMMITID=${COMMITID} "
MAKEFLAGS+="EFIDIR=%{efidir} PKGNAME=shim RELEASE=%{release} "
MAKEFLAGS+="ENABLE_SHIM_HASH=true "
MAKEFLAGS+="%{_smp_mflags}"
-if [ -f "%{SOURCE1}" ]; then
- MAKEFLAGS="$MAKEFLAGS VENDOR_CERT_FILE=%{SOURCE1}"
+if [ -f "%{SOURCE90001}" ]; then
+ MAKEFLAGS="$MAKEFLAGS VENDOR_CERT_FILE=%{SOURCE90001}"
fi
%if 0%{?dbxfile}
if [ -f "%{SOURCE2}" ]; then
@@ -134,8 +136,8 @@ COMMITID=$(cat commit)
MAKEFLAGS="TOPDIR=.. -f ../Makefile COMMITID=${COMMITID} "
MAKEFLAGS+="EFIDIR=%{efidir} PKGNAME=shim RELEASE=%{release} "
MAKEFLAGS+="ENABLE_SHIM_HASH=true "
-if [ -f "%{SOURCE1}" ]; then
- MAKEFLAGS="$MAKEFLAGS VENDOR_CERT_FILE=%{SOURCE1}"
+if [ -f "%{SOURCE90001}" ]; then
+ MAKEFLAGS="$MAKEFLAGS VENDOR_CERT_FILE=%{SOURCE90001}"
fi
%if 0%{?dbxfile}
if [ -f "%{SOURCE2}" ]; then
--
2.31.1
shim.rocky,1,Rocky Linux,shim,15.4-4,security@rockylinux.org
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment