APPLIED[L/U]: [K][L][SRU][PATCH] UBUNTU: [Packaging] Revoke and rotate to new signing key

Andrea Righi andrea.righi at canonical.com
Fri Jan 20 12:37:09 UTC 2023


On Thu, Jan 19, 2023 at 03:18:06PM +0000, Dimitri John Ledkov wrote:
> BugLink: https://bugs.launchpad.net/bugs/2002812
> 
> Update revocations, which match the next Ubuntu shim v15.7
> revocations. Specifically - revoke certs that were previously
> protected with by-hash revocations, revoke lost/unused certificates.
> 
> Kernels with this patch applied should be signed using ubuntu/4 pro/3
> core/2 signing streams.
> 
> TPM PCR values and measurements will change when changing the signing
> key.
> 
> Signed-off-by: Dimitri John Ledkov <dimitri.ledkov at canonical.com>

Applied to lunar/linux and lunar/linux-unstable.

Thanks,
-Andrea



More information about the kernel-team mailing list