Comment # 62 on bug 1189841 from Michal Suchanek

(In reply to Martin Wilck from comment #60)
> Michal, your new scripts cause mokutil to be called not only for the
> -ueficert package, but also for oridnary kernel packages (rpm-script calls
> cert-script).
> 
Yes, that's expected.

The ueficert script was appended to the rpm script (when there were any signing
certificates) but due to the error handling the rpm script would exit before
the ueficert script so it would not get executed which is this bug.
> 
> I suggest adding something like this to cert-script:
> 
> > if ! mokutil --sb-state 2>/dev/null; then
> >     exit 0
> > fi
> 
> mokutil --sb-state succeeds on uefi systems (with and without SB) whereas it
> fails on BIOS systems.
> 
> Ok?

This sounds OK.

Maybe also separate bug should be filed to track this.