ACK: [B][F][J][K][L][SRU][RESEND PATCH] UBUNTU: [Packaging] Revoke and rotate to new signing key

[Luke Nowakowski-Krijger]

Acked-by: Luke Nowakowski-Krijger <luke.nowakowskikrijger at canonical.com>

On Thu, Jan 19, 2023 at 7:19 AM Dimitri John Ledkov <
dimitri.ledkov at canonical.com> wrote:

> BugLink: https://bugs.launchpad.net/bugs/2002812
>
> Update revocations, which match the next Ubuntu shim v15.7
> revocations. Specifically - revoke certs that were previously
> protected with by-hash revocations, revoke lost/unused certificates.
>
> Kernels with this patch applied should be signed using ubuntu/4 pro/3
> core/2 signing streams.
>
> TPM PCR values and measurements will change when changing the signing
> key.
>
> Signed-off-by: Dimitri John Ledkov <dimitri.ledkov at canonical.com>
>
> Dimitri John Ledkov (1):
>   UBUNTU: [Packaging] Revoke and rotate to new signing key
>
>  .../revoked-certs/canonical-uefi-2012-all.pem | 36 ++++----
>  .../revoked-certs/canonical-uefi-2017-all.pem | 86 +++++++++++++++++++
>  .../revoked-certs/canonical-uefi-2018-all.pem | 86 +++++++++++++++++++
>  .../revoked-certs/canonical-uefi-2019-all.pem | 86 +++++++++++++++++++
>  .../canonical-uefi-2021v1-all.pem             | 86 +++++++++++++++++++
>  .../canonical-uefi-2021v2-all.pem             | 86 +++++++++++++++++++
>  .../canonical-uefi-2021v3-all.pem             | 86 +++++++++++++++++++
>  .../canonical-uefi-uc2019-all.pem             | 86 +++++++++++++++++++
>  debian/rules                                  |  5 ++
>  9 files changed, 625 insertions(+), 18 deletions(-)
>  create mode 100644 debian/revoked-certs/canonical-uefi-2017-all.pem
>  create mode 100644 debian/revoked-certs/canonical-uefi-2018-all.pem
>  create mode 100644 debian/revoked-certs/canonical-uefi-2019-all.pem
>  create mode 100644 debian/revoked-certs/canonical-uefi-2021v1-all.pem
>  create mode 100644 debian/revoked-certs/canonical-uefi-2021v2-all.pem
>  create mode 100644 debian/revoked-certs/canonical-uefi-2021v3-all.pem
>  create mode 100644 debian/revoked-certs/canonical-uefi-uc2019-all.pem
>
> --
> 2.34.1
>
>
> --
> kernel-team mailing list
> kernel-team at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20230119/d75912bd/attachment.html>