APPLIED[L/U]: [K][L][SRU][PATCH] UBUNTU: [Packaging] Revoke and rotate to new signing key
Andrea Righi
andrea.righi at canonical.com
Fri Jan 20 12:37:09 UTC 2023
On Thu, Jan 19, 2023 at 03:18:06PM +0000, Dimitri John Ledkov wrote:
> BugLink: https://bugs.launchpad.net/bugs/2002812
>
> Update revocations, which match the next Ubuntu shim v15.7
> revocations. Specifically - revoke certs that were previously
> protected with by-hash revocations, revoke lost/unused certificates.
>
> Kernels with this patch applied should be signed using ubuntu/4 pro/3
> core/2 signing streams.
>
> TPM PCR values and measurements will change when changing the signing
> key.
>
> Signed-off-by: Dimitri John Ledkov <dimitri.ledkov at canonical.com>
Applied to lunar/linux and lunar/linux-unstable.
Thanks,
-Andrea
More information about the kernel-team
mailing list