On Tue, 13 Jun 2023 11:05:53 -0400 "Chris Murphy" lists@colorremedies.com wrote:
OK I tried this again and discover shim is signed twice.
It has been awhile since I built a local kernel that I signed, but even a locally built kernel was signed twice when using rpmbuild. I assume that somewhere in the build plumbing there are two certificates and two sign procedures. I just removed them because they were dummy certificates (test) when I built locally, and I didn't need them.
So, this has been happening for years.