From c37196e74688dc2d1b3bb2049ea4df99baba9fa5 Mon Sep 17 00:00:00 2001
From: Steve Langasek <steve.langasek@canonical.com>
Date: Thu, 13 Dec 2012 18:42:34 -0800
Subject: debian/patches/sbsigntool-not-pesign: Sign MokManager with sbsigntool
 instead of pesign.

---
 Makefile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'Makefile')

diff --git a/Makefile b/Makefile
index 412eba5e..5290622f 100644
--- a/Makefile
+++ b/Makefile
@@ -88,8 +88,8 @@ Cryptlib/OpenSSL/libopenssl.a:
 		-j .debug_line -j .debug_str -j .debug_ranges \
 		--target=efi-app-$(ARCH) $^ $@.debug
 
-%.efi.signed: %.efi certdb/secmod.db
-	pesign -n certdb -i $< -c "shim" -s -o $@ -f
+%.efi.signed: %.efi shim.crt
+	sbsign --key shim.key --cert shim.crt $<
 
 clean:
 	$(MAKE) -C Cryptlib clean
-- 
cgit v1.2.3