https://bugzilla.suse.com/show_bug.cgi?id=1173944 https://bugzilla.suse.com/show_bug.cgi?id=1173944#c14 Takashi Iwai <tiwai@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|kernel-bugs@opensuse.org |maintenance@opensuse.org --- Comment #14 from Takashi Iwai <tiwai@suse.com> --- (In reply to Marcus Meissner from comment #11)

(the :Update project seems to contain the older cert with serial=1, which we replaced in january)

regardless of that, the checking is done via the UEFI CA, the signing cert should not cause issues.

Well, having a different key in the update can be a serious problem. Since the old GA kernel may be pruned, it'll be also deleted from the MOK list. Then the weak link module will become invalid out of sudden, too. At least we need to recover to the old identical cert. Reassigned to maintenance people. Please put back if the change in the kernel side is required. -- You are receiving this mail because: You are the assignee for the bug.