File 0001-pesign-gen-repackage-spec-fix-the-filename-issue-in-.patch of Package pesign-obs-integration.27465
From 32abe53f46332e122a1e06f6ed2ba21bbe8ed066 Mon Sep 17 00:00:00 2001
From: "Lee, Chun-Yi" <jlee@suse.com>
Date: Thu, 13 Oct 2022 22:35:56 +0800
Subject: [PATCH] pesign-gen-repackage-spec: fix the filename issue in the
scripts of generated ueficert package
When using modsign-repackage, the post script in the generated
*-ueficert-*.rpm package can not enroll certificate to MOK through
mokutil. It shows:
Preparing... ################################# [100%]
Updating / installing...
1:drbd-kernel-ueficert-9.2.0~rc.3-1################################# [100%]
Failed to get file status, /etc/uefi/certs//etc/uefi/certs/8505A847.crt.crt
Failed to import /etc/uefi/certs//etc/uefi/certs/8505A847.crt.crt
warning: %post(drbd-kernel-ueficert-9.2.0~rc.3-1.x86_64) scriptlet failed, exit status 255
The reason is that pesign-gen-repackage-spec generates /etc/uefi/certs/*.crt
filename to -ueficert scripts in repackage.spec. But
suse-module-tools/kernel-scriptlets/cert-script already applies /etc/uefi/certs/
and .crt extension. It causes redundant path and extension be generated to
*-ueficert-*.rpm.
This patch removed the /etc/uefi/certs path and .crt extension before
pesign-gen-repackage-spec print it to repackage.spec. (bsc#1195805)
Signed-off-by: Lee, Chun-Yi <jlee@suse.com>
---
pesign-gen-repackage-spec | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/pesign-gen-repackage-spec b/pesign-gen-repackage-spec
index 688c375..01ca19e 100755
--- a/pesign-gen-repackage-spec
+++ b/pesign-gen-repackage-spec
@@ -556,7 +556,8 @@ if ($cert_subpackage) {
print STDERR "warning: Ignoring $directory/$certdir/$cert (no .crt suffix)\n";
next;
}
- $certs .= " $certdir/$cert";
+ $cert =~ s{\.[^.]+$}{};
+ $certs .= " $cert";
}
}
if (!$certs) {
--
2.35.3