On Wed, Jun 14, 2023, at 7:20 PM, Kevin Kofler via devel wrote:
Chris Murphy wrote:
> OK I tried this again and discover shim is signed twice.
>
> Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation,
> CN=Microsoft Corporation UEFI CA 2011
> Not Before: Sep 9 19:40:20 2021 GMT
> Not After : Sep 1 19:40:20 2022 GMT
>
> Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation,
> CN=Microsoft Corporation Third Party Marketplace Root
> Not Before: Jun 27 21:22:45 2011 GMT
> Not After : Jun 27 21:32:45 2026 GMT
Are you sure those are 2 independent signatures and not a signature chain?
No idea.
--
Chris Murphy