diff --git a/kernel.spec b/kernel.spec
index ec1fca6f29c09ed2966dde1131a7e3f735a35ab7..b6e2531200ade21f84d840eb8c65185631b26365 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -12,7 +12,7 @@
 %global upstream_sublevel   0
 %global devel_release       153
 %global maintenance_release .56.0
-%global pkg_release         .134
+%global pkg_release         .135
 
 %define with_debuginfo 1
 # Do not recompute the build-id of vmlinux in find-debuginfo.sh
@@ -878,6 +878,9 @@ fi
 %endif
 
 %changelog
+* Wed Jun 19 2024 luhuaxin <luhuxin1@huawei.com> - 5.10.0-153.56.0.135
+- Add the pub key in openEuler RPM-PGP certificate
+
 * Wed May 29 2024 Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.56.0.134
 - !8158 [sync] PR-8017:  perf/core: Bail out early if the request AUX area is out of bound
 - !8115 [sync] PR-8023:  fs/ntfs3: Fixed overflow check in mi_enum_attr()
diff --git a/process_pgp_certs.sh b/process_pgp_certs.sh
index 87aae3704fa8cd0c371a04b2d60deea21fa95c7a..3f8cdf0f11f72ca336d38cf78a155485111217b4 100644
--- a/process_pgp_certs.sh
+++ b/process_pgp_certs.sh
@@ -31,6 +31,6 @@ dd if=$CERT_2203_SPx.gpg of=$CERT_2203_SPx.subkey.gpg skip=903 bs=1c count=399 s
 # 22.03 use main key to sign, so we dont need to deal it.
 
 # merge all cert information
-cat $CERT_2203_SPx.subkey.gpg $CERT_2203_SPx.userid.gpg $CERT_2203.gpg > $CERT_OUT
+cat $CERT_2203_SPx.subkey.gpg $CERT_2203_SPx.userid.gpg $CERT_2203.gpg $CERT_2203_SPx.gpg > $CERT_OUT
 # cleanup
 rm -f RPM-GPG-KEY-openEuler-*