[rpms/edk2] f45: update make-dbxupdate.sh script

[Gerd Hoffmann <kraxel@redhat.com>]

A new commit has been pushed.

Repo   : rpms/edk2
Branch : f45
Commit : e486ea0f41fee7dd69f4cdd2d6334934e41f2b10
Author : Gerd Hoffmann <kraxel@redhat.com>
Date   : 2026-09-08T14:26:58+02:00
Stats  : +6/-6 in 1 file(s)
URL    : https://src.fedoraproject.org/rpms/edk2/c/e486ea0f41fee7dd69f4cdd2d6334934e41f2b10?branch=f45

Log:
update make-dbxupdate.sh script

---
diff --git a/make-dbxupdate.sh b/make-dbxupdate.sh
index 781434b..66e1761 100644
--- a/make-dbxupdate.sh
+++ b/make-dbxupdate.sh
@@ -3,7 +3,7 @@
 # https://github.com/microsoft/secureboot_objects.git
 sbrepo="$HOME/projects/secureboot"
 
-dbxdir="PostSignedObjects/DBX"
+dbxdir="PostSignedObjects/SignedByKEK2023"
 srcdir="${sbrepo}/${dbxdir}"
 
 test -d "$srcdir" || exit 1
@@ -12,9 +12,9 @@ echo "#"
 echo "# pull repo updates"
 (set -x; cd "$sbrepo"; git pull)
 commit=$(cd "$sbrepo"; git log --oneline -n 1 --pretty='format:%h' -- $dbxdir)
-latest=$(cd "$sbrepo"; git log --oneline -n 1 --pretty='format:%cs' -- $dbxdir | tr -d '-')
+latest=$(cd "$sbrepo"; git log --oneline -n 1 --pretty='format:%cs.2023' -- $dbxdir | tr -d '-')
 version=$(cd "$sbrepo"; git describe --tags --long --match 'v*' | cut -d- -f1)
-current=$(awk '/%define DBXDATE/ { print $3 }' edk2.spec)
+current=$(awk '/%define DBXDATE_2023/ { print $3 }' edk2.spec)
 if test "$current" = "$latest"; then
     echo "#"
     echo "# no update needed ($latest, $version)"
@@ -29,12 +29,12 @@ echo "#   latest  : $latest ($version)"
 
 echo "#"
 echo "# copy updates"
-cp -v "${srcdir}/amd64/DBXUpdate.bin" "DBXUpdate-${latest}.x64.bin"
-cp -v "${srcdir}/arm64/DBXUpdate.bin" "DBXUpdate-${latest}.aa64.bin"
+cp -v "${srcdir}/dbx_x64.efiauth2" "DBXUpdate-${latest}.x64.bin"
+cp -v "${srcdir}/dbx_aarch64.efiauth2" "DBXUpdate-${latest}.aa64.bin"
 
 echo "#"
 echo "# update specfile and git"
-sed -e "/%define DBXDATE/s/20.*/$latest/" -i edk2.spec
+sed -e "/%define DBXDATE_2023/s/ 20.*/ $latest/" -i edk2.spec
 git add DBXUpdate-${latest}.*.bin
 git add edk2.spec
 git commit -m "update dbx to $latest ($version)"