Comment # 125 on bug 1173158 from Tripple Moon

(In reply to Gary Ching-Pang Lin from comment #123)
> (In reply to Tripple Moon from comment #120)
> > Or is there more involved to it?
> > Perhaps one needs to completely remove the variable from the UEFI, in which
> > case how would a user do that?
> > 
> use_openSUSE_cert is just a mirror of openSUSE_Verify, a BootService
> variable.
> Please use "mokutil --revoke-cert".
> 
> > Because accepting something like this should also have a way to revoke if
> > one does not wish to continue using openSUSE...
> > (Which IMHO would be a bad choice but anyway you guys get what i mean)

Again, i have no certificate to revoke or remove from the MokList when
accessing the MokList outside opensuse.
"mokutil --revoke-cert" would need a certificate as argument to revoke, which
in this case would be the one hardcoded inside the shim of opensuse...
Plus that is only about the certificate to trust, *not* the choice to accept
it...
Anyway, this discussion has trailed off the topic enough and im dropping it...
If i ever need to remove that choice i will manually delete the UEFI-variable
"use_openSUSE_cert" and/or "openSUSE_Verify" using other tools outside of
suse...
(In worst case remove the CMOS battery and do a complete reset of the
hardware.)
What a mess...