From a75aa21e98f36e251948ce956d3976e304e3c48a Mon Sep 17 00:00:00 2001
From: nazunalika <tucklesepk@gmail.com>
Date: Thu, 27 Jan 2022 12:05:01 -0700
Subject: [PATCH] backport current sb certs for testing

---
 SOURCES/sb/rocky-root-ca.der | Bin 0 -> 1177 bytes
 SOURCES/sb/rocky-signing.der | Bin 0 -> 1183 bytes
 SOURCES/sb/rockydup1.x509    | Bin 0 -> 1296 bytes
 SOURCES/sb/rockykpatch1.x509 | Bin 0 -> 1289 bytes
 SPECS/rocky-release.spec     |  15 ++++++++++++++-
 5 files changed, 14 insertions(+), 1 deletion(-)
 create mode 100644 SOURCES/sb/rocky-root-ca.der
 create mode 100644 SOURCES/sb/rocky-signing.der
 create mode 100644 SOURCES/sb/rockydup1.x509
 create mode 100644 SOURCES/sb/rockykpatch1.x509

diff --git a/SOURCES/sb/rocky-root-ca.der b/SOURCES/sb/rocky-root-ca.der
new file mode 100644
index 0000000000000000000000000000000000000000..9d3a8079a91f3b1cd33d3fab888088905ba2f812
GIT binary patch
literal 1177
zcmXqLVwq~t#9X_8nTe5!NkkwgT;|<+O_c+yTA!}k(&{v8<Bc{0UN%mxHjlRNyo`+8
ztPBQ?R}8rgIN6v(S=fY`LW2zj4fsJE4jvAd)SSff#G+I~J_8<*5IYa6OMY2uk)f`E
zHi*x~qY{*#oL#BlnpcuqR8W*zoT?C<pH>3Wqu`cbnwOGTl9``psAwP$QqIjI5tN#f
zng~>tnwOrLmzr9XnU}6mlA4%ns9~T6Qo_t54>8dvGq1ElAviU;6lj!FetwBU5QuPg
zG*mNCfxDlRQB1rTq$abZ(xC|ClpK&gz5Jqd137VCBSQl-BLhQI15*RTC~;n6AlJ|W
z${nuWZemnIj$lSs2IeM4eg=akMlPl%Mn;CmN3!{&IsV=b{PV!m^5u%)*>WGk*WJ=#
zHIC2MT~aphcCtfT`7#A>)1#%Q?!<U6{qaib;UV{5mk+)F7t}mO%xS`gPr}-(ij`h0
zaFRA<TETo@z;o{c+bO1gE~*tAE;A1(M<kyK^H|`}efsr+zkenxx!rd*%Vhi@yRkmW
za6!Pnu<sRidP*(%_qrMndTyLj_q*oCcP|Aw^LZ0lU&QZU<##sy<e7P~;uGrsmZTh6
z`B<8n`I70PcC9B*OLiO%YbxZ~{P>K;;=tVzJE!k6n>sJWNcHNHDRUW3;?8GS&I>Ck
zx}qd);^rc9NJPBju-KYcvwpUIWcYoPZ^47}7j1P^E=5jRvXqILk%4h>tU<JaEHJ^z
z^0A1qi1_GaU%%$}LbUPJj+bp|@~Mx+@{fR%tgJGNgn?KCb_Jj;AuG(nYQW6M_}_pV
z#N%gS0p>gO90rU4Mh5>)#S_*Fv;US)V@>T<tXt`EdD0&}5tiBiJ!(s?bqcM2y*qHC
z^Q`;Y|9XPwc(qOAs=iXOY5V?TiSajiwmDq+xJgc=MBtW_{nDx4N>ASWUYT`L<mhXr
zpDY|d@&n&`%)NF%M2^Af>S>*&E9M#W6!)CmaG|s*Xve!x-t7_#IM+=UOnjTv+jDwe
zB<m)}jPz^Kf5r2@v`6mVdtHS6)T?S&sgM7@W^+^otkzs~#nE)yuCmVS!EtVkq5eEB
zT6MJ*o~_y(np@92{qm(kKE>$4+{cUN^Detwulb{M_oG_L)DU~8rz^en3}?*JlH}X|
c_V7=yQ^`A=4^OV%tr8$5>Jf5ymKM7)07Xo*0ssI2

literal 0
HcmV?d00001

diff --git a/SOURCES/sb/rocky-signing.der b/SOURCES/sb/rocky-signing.der
new file mode 100644
index 0000000000000000000000000000000000000000..51d2aacff23f7244c5d0b0b0cbcb42cfa429f770
GIT binary patch
literal 1183
zcmXqLVwr8w#N51qnTe5!iILNQmyJ`a&7<u*FC!y2D}zDf6+><VPB!LH7B*p~&|pJB
z1AY*PgNMT<H7Bt=u_)D$&wvLc#LmO&l3$iuWT<PP4dQe0s08IFXICn?=9Q!t6%=I_
zrz!;Jr<H*8D7fX9=A|T-Waj4?DjLXxlymb)1f}MrCIVHZ=A~!mrKT2T=A|o?q$cJX
zY8a@2lrZziLrnC^%qy)>2u@8d1sdg)pI@R71R|Ur4b==(;O^&S6caB7smUy<bSMHj
zB?qKWFTW_=Ku(<3$PfsOjf@Q~4b7r}To50|HE6sv2)qsQ4A|SU$leC~H#jpr4-`Dk
zsYNA3d%B5H2|0QhSs9p{82K3tni#p5niv@wPBI;|d$iDO>%_X~1K*7s-PT=r{*_6j
zDy#hI%w3tDH=HECRZZ(!Aei!MTe;Zdd`0^o-aEH?KMN5x(%v2Mn`x7F=bYF3Zm-mM
z+z_T$+iA$|7B8zEZ^6-)app=xwM+Drb_M1MSN2Svwf1*$*`8m?r*f1pCwwsYJ~vB@
zX?A+_C-=ly$wx&o`YG;b-CGS0gzC4MpM6=h^0+|M&V>`p_cP5qqw!<1j+YXr<6EaQ
z*3GS=vPaC*#gdm^d9_v4ZrhbZ)e^gJ-ArQ_G)!N=+j{eEM(56ZtB=i>@Hy<2;Oww>
z&f%DIO$R<L`K6`scUFZ`?ZM=m4vdF<{@*rYnJaF^p)YTjwVH{Uk%4h>g+UoOLCXp=
zGX7^_GGH*^1IB_ZKZwV|%*5VcAO_;Ag7`cJTx=ZLY>cd|?99vtvLJCj7BLo)6Be6W
z*Ze!5FVy*0b!SHtQ`YS#9pGdxtIQ%{Al4w_qmzC8n%@i2##1|9wx!9ZJ`&46f*d!%
ztOtx6Mg|>5JLOf^1=A+abxx@hHM{<B`o<M^X3Ksyxw2}KMx(^?he4~Z6nE7Y?kTD0
z&MW!Fdhyc2$$y?-UawrZb^>Sr&D*@w<L!^6vMcQ4&CF=pJ?rC5(XTs2^|)V!ZM$`6
zNA<?)j4Vz5+1ELbSNnuWJu#ZCe_{K34aVZ#%KV-)0zSP-eS9uNZnL-O^^YBA9qN_7
zW#kvkayn!*TP@=8@t+&)*D<eH-F4<_%|q97w<a;^ib$@1pWe2X<EBia>o4usN?eI8
z7rG`fCobOb^T>HSw;ubD){s>{qlER|8-%bNF@MZ7w}Z*D^!3A-T`yu*v>y|VwEM38
VW8TXBb%#w~FO|;-{p3>`2LS(ztiAvM

literal 0
HcmV?d00001

diff --git a/SOURCES/sb/rockydup1.x509 b/SOURCES/sb/rockydup1.x509
new file mode 100644
index 0000000000000000000000000000000000000000..4296d0f40729ef708d54912a21f2a8663f4dc809
GIT binary patch
literal 1296
zcmXqLV&yStV*av#nTe5!iILTSmyJ`a&7<u*FC!y2D}zDf6+><VPB!LH7B*p~&|pJB
z1AY*PgNMT<H7Bt=u_)D$&wvLc#LmO&l3$iuWT<PP4dQe0s08IFXICn?=9Q!t6%=I_
zrz!;Jr<H*8D7fX9=A|T-Waj4?DjLXxlymb)1f}MrCIVHZ=A~!mrKT2T=A|o?q$cJX
zY8a@2lrZziLrnC^%qy)>2u@8d1sdg)pI@R71R|Ur4b==(;O^&S6caB7smUy<bSMHj
zB?qKWFTW_=Ku(<3$PfsOjSNjJjVz;pTo50|HE6s&2)wOtpbPP~8nU-tiZX$rtPolN
z3_oCqW~S$X!pS+csDx<WH!&_kj%P+z2IeNleg=ak#xABN#zuzyC%jyzdNL?T{fM~O
zQ!syzWtidokJiSoW?yII*Xx;komKtmO5g04YK044)~##|{OfT(M8|{i*TEwvBz1&s
z<+pb3viO`CEzfCj_YQ|z%3sNCJ7%b^Ouc;R*9n>L!Opwyf9sHZv69tFzCqV5oX_Q>
zos1M$e?ZH%h0?;p%aw~KOZ>V0G@tu##S;#VQ>uJ^XJ^fn`~JZrC9&LRkA9AfoJZgt
z8|_WjhrXQ)ntkHls~!<n>9Uahx!b1J7(Nv=e5vhzDz)}vSs7c(v1Kmta}z~M<bTJ=
zDwMx+SRBQDx|#2cn8o(Mcm)RW&h-}JjUPYeOf$-{cKQ>f&^!OznQ0e}UY>6M*g8u2
z%WSp_i#=Zl?&-8Cnj6EGa;s2nC)@daHL+Pb;n%j>aroSEnDvnHyrr`1>|f?@7e5nm
zyLLr?;m#Sx(}fqEej~iRY3bo<r|SK=Hg}6jYZN)0h(4>oMsxq6xh1uQOF8(b&t84j
z#P{Rxxo_T|nW$U5b#kfPjTef3OYgm3&&YR|iJ6gsadCn{95`pm3NtePXJIm6FyI3w
z2U&g)kA<0uy}>{h#OGrXV-eYW(*Mk^$Lg*dWzWu<WvRC2&wEt|aK4gNW|1%uYY_3#
z$-aKg?}cdNsU0ud(&SSgiRB+bP6NQa4om}#3_|}N$!Bg)3;0msb4I7F?q8M;x3m4V
zb<G=m0z<22uQ%kV{yyj1jGr>c=KP5%*Sw(qq`tDK*K@_q#Z5_ZlNENk-d><u7CnE{
zJ-bPXe2PAdA3Nh4Oju9E&N0k*xa`HlXw7dIOPg~I4=AqWeA`&_WJlY+^>W)4MY8Ju
z+wE?-v$&pLwrOnuU)!qhPiKVoy@`!K@Pf0nYTpK@*1xsfw@wuq)riFAKT7m1XH%S)
zYvbeg^GUy|+A0Bon>ylwV#Y1=R!)6<T8;mM{r>>d%~$*r&Mcm7{%n@-tJ5NZXJo^=
r_B8EU{{Gm!PdX<q-l~?E|5ur_{r44nrMIfnbY5O((G~tB>nj8R@Tusd

literal 0
HcmV?d00001

diff --git a/SOURCES/sb/rockykpatch1.x509 b/SOURCES/sb/rockykpatch1.x509
new file mode 100644
index 0000000000000000000000000000000000000000..860f8c91635b8604a9b4996470f69c5cd1fb26cc
GIT binary patch
literal 1289
zcmXqLVr4aGVt%`TnTe5!iIL5KmyJ`a&7<u*FC!y2D}zDf6+><VPB!LH7B*p~&|pJB
z1AY*PgNMT<H7Bt=u_)D$&wvLc#LmO&l3$iuWT<PP4dQe0s08IFXICn?=9Q!t6%=I_
zrz!;Jr<H*8D7fX9=A|T-Waj4?DjLXxlymb)1f}MrCIVHZ=A~!mrKT2T=A|o?q$cJX
zY8a@2lrZziLrnC^%qy)>2u@8d1sdg)pI@R71R|Ur4b==(;O^&S6caB7smUy<bSMHj
zB?qKWFTW_=Ku(<3$PfsOjf@NoP0gc#To50|9n9X&E=Vj%&QJ)>OwR)akaKEL3DMqe
zVqAnA!Hld7%uS5_3<gb%T}(}kjSPG38|ruxRw!6<-BbK@d8biPbYi{s+}`!`Z`Yif
z{(IB4Wm`JdI(^UWzqRN?<*jAY8&`O>M;;C<-t%<cyBkwQL)Uq|6>6Jb`eW;XGf$4#
z#RnYBG>KkVTqLV<Nl9dmrF)LgHiOG<+$zlt8GQTw6e<Ef$3&|v=DirA@nn{wW;%nF
zg?IVekB|5JPnw(a_-){Cy(24bOfp?^=5d;-)Voi)vpId1D^1>T=4nfji1qXmYnPK7
zR>#X9vk|EdnsC@sqx4^+;!4Fyn@Zm8TBqF3|JuXRQ|slir4Oc-wX!H|-!wPv>M@P!
zCC@%jJ3Tv5wVGqg{5doILQm<QsPF1?D-C(KbhnYl+x6)mII<Le&58>B6KP!a=w|wp
zQp59db0e-lw_2yid%>-7QiYWJpA8IRe2?1s+h2y<al3N7VhYFk#tQ*qH=YOuKh@@Y
z^x7|@Pe#H({dU^EZxb$OF~7NbLx!s-;A-}L;nm-!zEdhSJhH<>=CAyltwQ^n`W+pX
zP0?f*`0HZnu|xJa6Eh<N<KhH^IB=Gd6=r1o&%$KDV891V{<8ca9t$%QdxL>2h|k9&
z#v)QY>3dJe+t&LVEv4NyS&7`${8K6d&QP+-ED{D{4I(}|+1Ic6y%23Ywc}-5ntbXb
zvHT;*X#kkXfoXt|;dEj~ND{x!``3pX8<xf%H+_)b>Gk1Q#B;s#byJ$(ZZtJfcy`fB
z(3NkWEvNFU=sFp0ZV4YLSxsJsu%@)f`($fsuYYVS)Ct%&r|s3B$XoMxcbN7C1y6jl
zZ2A2elYa_tib;B5==)|(>=o;tZlyrQztjIQzHs_i>GJdwYx%Q<lg=DI`8hGfB22<S
zGvE5kl*m;I=~*w1F4NrG6*Fh~QEjDa+rE2ECLc0RZG5o#%K}xK%~4B2uXx8NYxHsl
zcePJD)Aajx%IbHTWgG_HhlDDd>*rd#D~bwfuWkLBmA9^gW#NN#iwkFhvbz@>i&@7d
auem-u$n3zynSo1kTHGzy|308%wgdoR?(MMv

literal 0
HcmV?d00001

diff --git a/SPECS/rocky-release.spec b/SPECS/rocky-release.spec
index 6050d7a..df6e492 100644
--- a/SPECS/rocky-release.spec
+++ b/SPECS/rocky-release.spec
@@ -16,7 +16,7 @@
 %define distro_code  Blue Onyx
 %define major        9
 %define minor        0
-%define rocky_rel    1%{?rllh:.%{rllh}}%{!?rllh:.1}
+%define rocky_rel    1%{?rllh:.%{rllh}}%{!?rllh:.2}
 %define rpm_license  BSD-3-Clause
 %define dist         .el%{major}
 
@@ -140,6 +140,10 @@ Source1226:     Rocky-Plus.repo
 Source1300:     rocky.1.gz
 
 # rocky secureboot certs placeholder (1400-1499)
+Source1400:     sb/rockydup1.x509
+Source1401:     sb/rockykpatch1.x509
+Source1402:     sb/rocky-root-ca.der
+Source1403:     sb/rocky-signing.der
 
 %description
 %{distro_name} release files.
@@ -276,6 +280,12 @@ install -m 0644 %{SOURCE304} %{buildroot}/%{_prefix}/lib/sysctl.d/
 install -d -m 0755 %{buildroot}%{_sysconfdir}/pki/sb-certs/
 install -d -m 0755 %{buildroot}%{_datadir}/pki/sb-certs/
 
+# Backported certs for now
+install -m 0644 %{SOURCE1400} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1401} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1402} %{buildroot}%{_datadir}/pki/sb-certs/
+install -m 0644 %{SOURCE1403} %{buildroot}%{_datadir}/pki/sb-certs/
+
 # x86_64
 echo "placeholder" > %{buildroot}%{_datadir}/pki/sb-certs/secureboot-ca-x86_64.crt
 
@@ -381,6 +391,9 @@ install -m 0644 %{SOURCE404} %{buildroot}/%{_prefix}/lib/sysctl.d/50-redhat.conf
 %{_datadir}/pki/sb-certs/*.crt
 
 %changelog
+* Thu Jan 27 2022 Louis Abel <label@rockylinux.org> - 9.0-1.2
+- Backport current SB certs for now
+
 * Mon Jan 10 2022 Louis Abel <label@rockylinux.org> - 9.0-1.1
 - Add LOGO to /etc/os-release