pesign-client — tool for signing UEFI applications with a pesign server

       Peter Jones

Linux                                             Jun 4, 2020$                                  PESIGN-CLIENT(1)

pesign-client is a command line tool for  manipulating  signatures  and  cryptographic  digests  of  UEFI
       applications.

       PESIGN_TOKEN_PIN
               PIN for use with --unlock for the token specified by -fl-token

       pesign-client — tool for signing UEFI applications with a pesign server

-ifile | --infilefile
               The input binary file to be signed with --sign-ofile | --outfilefile
               The output binary file to be signed with --sign-efile | --exportfile
               Export signature from --sign to file-ttoken | --tokentoken
               Sign using NSS token token-cnickname | --certificatenickname
               Sign using NSS certificate nickname-k | --kill
               Kill the pesign server

       -q | --is-unlocked
               Query the lock status of the token specified by --token-s | --sign
               Sign the file specified by --infile-u | --unlock
               Unlock  the  token  specified  with  --token  using  the  PIN  read from --pinfd or --pinfile, or
               specified by PESIGN_TOKEN_PIN

       -ffd | --pinfdfd
               File descriptor to read the PIN from for --unlock-Ffile | --pinfilefile
               File to read the PIN from for unlock

pesign(1), certutil(1)

pesign-client  [-ifile] [-ofile] [-efile] [-ttoken] [-cnickname] ⟨[-k |] [-q |] [-s |] [-u]⟩ [-ffd]
                     [-Ffile]