import grub2-2.02-106.el8

SPECS/grub2.spec

@@ -24,6 +24,8 @@ Source6:              gitignore
 Source8:              strtoull_test.c
 Source9:              20-grub.install
 Source12:             99-grub-mkconfig.install
+Source14:             rockylinuxsecurebootkey.cer
+Source16:             rockylinuxsecurebootkey.cer
 Source19:             sbat.csv.in
 
 Source90000:          rocky-root-ca.der
@@ -33,12 +35,12 @@ Source90001:          rocky-signing.der
 %include %{SOURCE1}
 
 %if 0%{with_efi_arch}
-%define old_sb_ca	%{SOURCE13}
-%define old_sb_cer	%{SOURCE14}
-%define old_sb_key	redhatsecureboot301
-%define sb_ca		%{SOURCE15}
-%define sb_cer		%{SOURCE16}
-%define sb_key		redhatsecureboot502
+%define old_sb_ca	%{SOURCE90000}
+%define old_sb_cer	%{SOURCE90001}
+%define old_sb_key	rockylinuxsecurebootkey
+%define sb_ca		%{SOURCE90000}
+%define sb_cer		%{SOURCE90001}
+%define sb_key		rockylinuxsecurebootkey
 %endif
 
 %ifarch ppc64le
@@ -522,6 +524,7 @@ fi
 
 %changelog
 * Tue Nov 09 2021 Release Engineering <releng@rockylinux.org> - 2.02-106
+- Removing redhat old cert sources entries (Sherif Nagy)
 - Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
 - Adding prod cert
 - Porting to 8.5