NAS-140773 / 27.0.0-BETA.1 / Add TrueNAS signing cert to kernel trusted keys

scripts/package/mkdebian

@@ -292,7 +292,7 @@ EOF
 
 cp "${srctree}/scripts/package/debian/rules" debian/
 mkdir -p debian/certs
-cp scripts/package/truenas/debian-uefi-certs.pem debian/certs
+cp scripts/package/truenas/truenas-uefi-certs.pem debian/certs
 cp scripts/package/truenas/changelog debian/changelog
 cp scripts/package/truenas/copyright debian/copyright
 

scripts/package/truenas/truenas-uefi-certs.pem

@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

scripts/package/truenas/truenas.config

@@ -58,7 +58,7 @@ CONFIG_NTB_TRANSPORT=m
 # Certificates for signature checking
 #
 CONFIG_MODULE_SIG_KEY=""
-CONFIG_SYSTEM_TRUSTED_KEYS="debian/certs/debian-uefi-certs.pem"
+CONFIG_SYSTEM_TRUSTED_KEYS="debian/certs/truenas-uefi-certs.pem"
 # end of Certificates for signature checking
 
 #