Comment # 15 on bug 954126 from Andrei Borzenkov

It actually looks like shim is simply ignoring any enrolled key. Leap shim is
not able to load anything except grub.efi shipped with openSUSE, even though my
key is claimed to be enrolled.

Same problem with Ubunut 14.04 shim BTW. Ubuntu has shim 0.8 and Leap shim 0.9.
But with both of them I am not able to load anything signed by non-default key.
I am able to load another shim which is signed by Microsoft though ...

This makes it rather hard to test anything. Gary, are there any known issues
here? I try to test custom grub2 and shim cannot verify image although I
enrolled my custom key (packaged with grub2) using MokManager.