[Bug 1870955] Re: MokManager - Only DER encoded certificate (*.cer/der/crt) is supported

[Valtteri Vuorikoski]

Seeing the same issue on a Hyper-V VM running 20.04. Workaround is to
enroll the MOK with mokutil.

Seems related to this bug: https://github.com/rhboot/shim/issues/143 .
While it was closed in 2018, maybe no one has recompiled shim-signed
with the fixed gnuefi?

** Bug watch added: github.com/rhboot/shim/issues #143
   https://github.com/rhboot/shim/issues/143

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim-signed in Ubuntu.
https://bugs.launchpad.net/bugs/1870955

Title:
  MokManager - Only DER encoded certificate (*.cer/der/crt) is supported

Status in shim-signed package in Ubuntu:
  Confirmed

Bug description:
  Installation of VirtualBox requires signing kernel modules.
  During installation a certificate is generated. It should be automatically added during system reboot. However, this is not happening.

  Manual attempt to add a certificate:
  After selecting the generated certificate the following error occurs:
  "Only DER encoded certificate (*.cer/der/crt) is supported".
  I managed to establish that it was MokManager's fault. It does not allow adding ANY certificate.

  Laptop: Acer Aspire 7 A715-74G-78PH
  UEFI:   Vendor: Insyde Corp.
   Version: V1.27
   Release Date: 03/05/2020

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shim-signed/+bug/1870955/+subscriptions