diff options
Diffstat (limited to 'eclass/kernel-install.eclass')
| -rw-r--r-- | eclass/kernel-install.eclass | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/eclass/kernel-install.eclass b/eclass/kernel-install.eclass index 35254b357005..7fd714111daf 100644 --- a/eclass/kernel-install.eclass +++ b/eclass/kernel-install.eclass @@ -728,11 +728,20 @@ kernel-install_install_all() { local dir_ver=${1} local kernel_dir=${EROOT}/usr/src/linux-${dir_ver} local relfile=${kernel_dir}/include/config/kernel.release + local kernel_cert=${kernel_dir}/certs/signing_key.x509 local image_path=$(dist-kernel_get_image_path) local image_dir=${image_path%/*} local module_ver module_ver=$(<"${relfile}") || die + if [[ ! -r ${SECUREBOOT_SIGN_CERT} && -r ${kernel_cert} ]]; then + openssl x509 \ + -inform DER -in "${kernel_cert}" \ + -outform PEM -out "${T}/cert.pem" || + die "Failed to convert kernel certificate to PEM format" + export SECUREBOOT_SIGN_CERT=${T}/cert.pem + fi + if [[ ${KERNEL_IUSE_GENERIC_UKI} ]]; then if use generic-uki; then # Populate placeholders |