From 8c37efcff66e2cbf49b554e2e6b7ddf0dc7f9508f7c59a507dbca7c458bd13cb Mon Sep 17 00:00:00 2001
From: "Marc S. Weidner" <msw@coresecret.dev>
Date: Sun, 7 Jun 2026 19:58:06 +0100
Subject: [PATCH] V9.14.018.2026.06.07

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
---
 lib/lib_gnupg.sh | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/lib/lib_gnupg.sh b/lib/lib_gnupg.sh
index 21aaf11..381c716 100644
--- a/lib/lib_gnupg.sh
+++ b/lib/lib_gnupg.sh
@@ -112,8 +112,13 @@ EOF
 
     fi
 
-    shred -fzu -n 5 -- "${VAR_TMP_SECRET}/${VAR_SIGNING_KEY}"
-    shred -fzu -n 5 -- "${VAR_TMP_SECRET}/${VAR_SIGNING_CA}"
+    if [[ -n "${VAR_SIGNING_KEY}" ]]; then
+      shred -fzu -n 5 -- "${VAR_TMP_SECRET}/${VAR_SIGNING_KEY}"
+    fi
+
+    if [[ -n "${VAR_SIGNING_KEY}" ]]; then
+      shred -fzu -n 5 -- "${VAR_TMP_SECRET}/${VAR_SIGNING_CA}"
+    fi
 
     ### Export public key for verification inside ISO / chroot.
     install -d -m 0755 -o root -g root "${VAR_HANDLER_BUILD_DIR}/config/includes.chroot/etc/ciss/keys"