shim.cfg

patch {
  file: "ROCKY/_supporting/0001-Adding-rocky-certs.patch"
}

patch {
  file: "ROCKY/_supporting/0002-fixing-required-build-release-numbers.patch"
}

delete {
  file: "SOURCES/redhatsecureboot501.cer"
}

delete {
  file: "SOURCES/redhatsecurebootca5.cer"
}

add {
  file: "ROCKY/_supporting/rocky-root-ca.der"
}

add {
  file: "ROCKY/_supporting/rocky-signing.der"
}

replace {
  file: "BOOTIA32.CSV"
  with_lookaside: "92df5af5e96e03c1473a42bfcdb590248b613b4c628b011cba228d44bd4feb48"
}

replace {
  file: "BOOTAA64.CSV"
  with_lookaside: "ba7296e7f201732d42f3f8f784260793ad2a6f08ef0cf02579c857935d695bb7"
}

replace {
  file: "BOOTX64.CSV"
  with_lookaside: "9ed30653532b664db33d22125df43e900fddcdd9d4cddc2a91e295da5200c540"
}

replace {
  file: "shimia32.efi"
   with_lookaside: "9c1e332525f7a51dff916830ac8d6f58b3d0186a74e1696fae4cb4ff4562561e"
}

replace {
  file: "shimaa64.efi"
   with_lookaside: "2a4e2d160c8ec31c9ae6a34534aaf1df6d2744183a93e0469f3a9885ca1dc043"
}

replace {
  file: "shimx64.efi"
   with_lookaside: "76a703f016769ff39f4e242d82922008b51d11c7a885b46c7a38b2bc2449ce6e"
}

spec_change {
  file {
    name: "redhatsecureboot501.cer"
    type: Source
    delete: true
  }

  file {
    name: "redhatsecurebootca5.cer"
    type: Source
    delete: true
  }

  append {
    field: "Release"
    value: ".rocky"
  }

   changelog {
    author_name: "Sherif Nagy"
    author_email: "sherif@rockylinux.org"
    message: "Updating Rocky shim efi and CSV files"
  }

   changelog {
    author_name: "Sherif Nagy"
    author_email: "sherif@disroot.org"
    message: "Updating Rocky testing certs and restructuring"
  }

  changelog {
    author_name: "Sherif Nagy"
    author_email: "sherif@disroot.org"
    message: "Updating Rocky testing certs"
  }

  changelog {
    author_name: "Sherif Nagy"
    author_email: "sherif@disroot.org"
    message: "Moving to PEM certs for Rocky"
  }

  changelog {
    author_name: "Sherif Nagy"
    author_email: "sherif@disroot.org"
    message: "Remove Centos Certs and added Rocky certs"
  }
}