Remove "shim.cer" on "make clean".

If we don't do this, an old key winds up being reused and
MokManager.efi.signed is signed with a different key than shim_cert
reflects.

Signed-off-by: Peter Jones <pjones@redhat.com>

diff --git a/Makefile b/Makefile
index 311a2c9b5e89f8176a789cd9e9bad1da1fe8bc31..53c4e000ff908648a4d9529761ccb5d73ac1fe9b 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -41,7 +41,7 @@ VERSION               = 0.4
 
 TARGET = shim.efi MokManager.efi.signed fallback.efi.signed
 OBJS   = shim.o netboot.o cert.o replacements.o
-KEYS   = shim_cert.h ocsp.* ca.* shim.crt shim.csr shim.p12 shim.pem shim.key
+KEYS   = shim_cert.h ocsp.* ca.* shim.crt shim.csr shim.p12 shim.pem shim.key shim.cer
 SOURCES        = shim.c shim.h netboot.c include/PeImage.h include/wincert.h include/console.h replacements.c replacements.h
 MOK_OBJS = MokManager.o PasswordCrypt.o crypt_blowfish.o
 MOK_SOURCES = MokManager.c shim.h include/console.h PasswordCrypt.c PasswordCrypt.h crypt_blowfish.c crypt_blowfish.h