diff --git a/fedora-ca.cer b/fedora-ca.cer
new file mode 100644
index 0000000..1ddde77
Binary files /dev/null and b/fedora-ca.cer differ
diff --git a/shim.spec b/shim.spec
index 8b91550..655742b 100644
--- a/shim.spec
+++ b/shim.spec
@@ -6,6 +6,7 @@ Summary:        First-stage UEFI bootloader
 License:        BSD
 URL:            http://www.codon.org.uk/~mjg59/shim/
 Source0:        http://www.codon.org.uk/~mjg59/shim/shim-%{version}.tar.bz2
+Source1:	fedora-ca.cer
 
 BuildRequires: gnu-efi git
 BuildRequires: pesign >= 0.99-6
@@ -58,8 +59,8 @@ git am %{patches} </dev/null
 pesign %{vendor_token_str} %{vendor_cert_str} -C vendor.cer
 
 MAKEFLAGS=""
-if [ -f vendor.cer ]; then
-	MAKEFLAGS="VENDOR_CERT_FILE=vendor.cer"
+if [ -f "%{SOURCE1}" ]; then
+	MAKEFLAGS="VENDOR_CERT_FILE=%{SOURCE1}"
 fi
 make %{?_smp_mflags} ${MAKEFLAGS}