From 39540973a8b3e68b86b5da3be62a65b1cae585df Mon Sep 17 00:00:00 2001
From: Nowa Ammerlaan <nowa@gentoo.org>
Date: Fri, 26 Sep 2025 12:09:20 +0200
Subject: [PATCH] kernel-install.eclass: only use cert if non-empty

Apparently this file sometimes exists, but is empty, in which case we
should not try to use it.

Closes: https://bugs.gentoo.org/963425
Signed-off-by: Nowa Ammerlaan <nowa@gentoo.org>
---
 eclass/kernel-install.eclass | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eclass/kernel-install.eclass b/eclass/kernel-install.eclass
index 7fd714111daf7..47afe6e750105 100644
--- a/eclass/kernel-install.eclass
+++ b/eclass/kernel-install.eclass
@@ -734,7 +734,7 @@ kernel-install_install_all() {
 	local module_ver
 	module_ver=$(<"${relfile}") || die
 
-	if [[ ! -r ${SECUREBOOT_SIGN_CERT} && -r ${kernel_cert} ]]; then
+	if [[ ! -r ${SECUREBOOT_SIGN_CERT} && -s ${kernel_cert} ]]; then
 		openssl x509 \
 			-inform DER -in "${kernel_cert}" \
 			-outform PEM -out "${T}/cert.pem" ||