[B][F][J][K][L][SRU][RESEND PATCH] UBUNTU: [Packaging] Revoke and rotate to new signing key

[Dimitri John Ledkov]

BugLink: https://bugs.launchpad.net/bugs/2002812

Update revocations, which match the next Ubuntu shim v15.7
revocations. Specifically - revoke certs that were previously
protected with by-hash revocations, revoke lost/unused certificates.

Kernels with this patch applied should be signed using ubuntu/4 pro/3
core/2 signing streams.

TPM PCR values and measurements will change when changing the signing
key.

Signed-off-by: Dimitri John Ledkov <dimitri.ledkov at canonical.com>

Dimitri John Ledkov (1):
  UBUNTU: [Packaging] Revoke and rotate to new signing key

 .../revoked-certs/canonical-uefi-2012-all.pem | 36 ++++----
 .../revoked-certs/canonical-uefi-2017-all.pem | 86 +++++++++++++++++++
 .../revoked-certs/canonical-uefi-2018-all.pem | 86 +++++++++++++++++++
 .../revoked-certs/canonical-uefi-2019-all.pem | 86 +++++++++++++++++++
 .../canonical-uefi-2021v1-all.pem             | 86 +++++++++++++++++++
 .../canonical-uefi-2021v2-all.pem             | 86 +++++++++++++++++++
 .../canonical-uefi-2021v3-all.pem             | 86 +++++++++++++++++++
 .../canonical-uefi-uc2019-all.pem             | 86 +++++++++++++++++++
 debian/rules                                  |  5 ++
 9 files changed, 625 insertions(+), 18 deletions(-)
 create mode 100644 debian/revoked-certs/canonical-uefi-2017-all.pem
 create mode 100644 debian/revoked-certs/canonical-uefi-2018-all.pem
 create mode 100644 debian/revoked-certs/canonical-uefi-2019-all.pem
 create mode 100644 debian/revoked-certs/canonical-uefi-2021v1-all.pem
 create mode 100644 debian/revoked-certs/canonical-uefi-2021v2-all.pem
 create mode 100644 debian/revoked-certs/canonical-uefi-2021v3-all.pem
 create mode 100644 debian/revoked-certs/canonical-uefi-uc2019-all.pem

-- 
2.34.1