commit:     39540973a8b3e68b86b5da3be62a65b1cae585df
Author:     Nowa Ammerlaan <nowa <AT> gentoo <DOT> org>
AuthorDate: Fri Sep 26 10:09:20 2025 +0000
Commit:     Nowa Ammerlaan <nowa <AT> gentoo <DOT> org>
CommitDate: Fri Sep 26 10:09:20 2025 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=39540973

kernel-install.eclass: only use cert if non-empty

Apparently this file sometimes exists, but is empty, in which case we
should not try to use it.

Closes: https://bugs.gentoo.org/963425
Signed-off-by: Nowa Ammerlaan <nowa <AT> gentoo.org>

 eclass/kernel-install.eclass | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eclass/kernel-install.eclass b/eclass/kernel-install.eclass
index 7fd714111daf..47afe6e75010 100644
--- a/eclass/kernel-install.eclass
+++ b/eclass/kernel-install.eclass
@@ -734,7 +734,7 @@ kernel-install_install_all() {
        local module_ver
        module_ver=$(<"${relfile}") || die
 
-       if [[ ! -r ${SECUREBOOT_SIGN_CERT} && -r ${kernel_cert} ]]; then
+       if [[ ! -r ${SECUREBOOT_SIGN_CERT} && -s ${kernel_cert} ]]; then
                openssl x509 \
                        -inform DER -in "${kernel_cert}" \
                        -outform PEM -out "${T}/cert.pem" ||

Reply via email to