diff --git a/shim.spec b/shim.spec
index a9d11d6..541b762 100644
--- a/shim.spec
+++ b/shim.spec
@@ -118,6 +118,7 @@ fi
 openssl x509 -in $cert -outform DER -out shim-$suffix.der
 # create empty local cert file, we don't need a local key pair as we
 # sign the mokmanager with our vendor key
+touch shim.crt
 touch shim.cer
 # make sure cast warnings don't trigger post build check
 make VENDOR_CERT_FILE=shim-$suffix.der shim.efi MokManager.efi 2>/dev/null