Re: Bad shim signature on kernel loading with patchset from 25.05.2023 and up

[Thomas Frauendorfer]

On Thu, Jun 22, 2023 at 3:00 PM Tobias Powalowski via Grub-devel
<grub-devel@gnu.org> wrote:
>
> Hi,
> just curious since the patchset from 25.05.2023, I cannot use Secure Boot on 
> my project anymore. The kernel hash cannot be validated anymore and shim 
> bails out with bad shim signature.
> Any help would be appreciated.
> greetings
> tpowa

According to shim documentation the shim lock protocol should use SysV
abi instead of MS abi.
So could you try if it solves your issue if you remove
"__grub_efi_api" from the verify function of
grub_efi_shim_lock_protocol in include/grub/efi/api.h in around line
1780