search

openSUSE / openSUSE-release-process

Other
8 stars 9 forks source link

[15.3 Retro] - Alpha Do we still need verify staging UEFI certificate? #90

Open lkocman opened 3 years ago

lkocman commented 3 years ago

Original task:

verify staging UEFI certificate

The UEFI certificate in staging and rings needs to be equal. If there's something wrong, like openQA not booting verify by checking /etc/uefi/certs in the shim package in Leap vs Factory. Use openssl to dump the certificates:

openssl x509 -noout -text -nameopt multiline,utf8,-esc_msb -inform DER -in $file

If anything then we're now using shim signed by SUSE cert.

DimStar mentioned that factory has shim-leap. Do we still need that should we have the SLE shim instead?

lkocman commented 3 years ago

@DimStar77 @nilxam you've mentioned that you should touch base with Gary prior removal.

lkocman commented 3 years ago

Factory is using shim-tumbleweed speciality in order not to sign shim every two weeks or so.