|
Unix VPS
Support
FAQ
Network
Miscellaneous
|
| PESIGN-CLIENT(1) | FreeBSD General Commands Manual | PESIGN-CLIENT(1) |
NAME
pesign-client - command line tool for signing UEFI applicationsSYNOPSIS
pesign [--in=infile | -i infile] [--out=outfile | -o outfile] [--export=exportfile | -e exportfile] [--token=token | -t token] [--certificate=nickname | -c nickname] [--unlock | -u] [--kill | -k] [--sign | -s] [ --is-unlocked | -q ] [--pinfd=pinfd | -f pinfd] [--pinfile=pinfile | -F pinfile]DESCRIPTION
pesign is a command line tool for manipulating signatures and cryptographic digests of UEFI applications.OPTIONS
- --unlock
- Unlock the specified token. A PIN - specified by one of --pinfd,
--pinfile, or the environmental variable PESIGN_TOKEN_PIN -
is required for this operation to succeed. The PIN may be empty, if that
is what is required for the token specified with --token.
--is-unlocked Query a token specified with --token for lock status.
- --pinfd=pinfd
- When using --unlock, read the token's PIN from the open file descriptor pinfd.
- --pinfile=pinfile
- When using --unlock, read the token's PIN from the file pinfile.
- --sign
-
Sign the binary specified by infile. - --export
- When used with --sign, write the signature to outfile.
- --infile=infile
- When used with --sign, specify the input binary.
- --outfile=outfile
- When used with --sign, specify output file. If --detached is specified, this will be a DER-formatted signature. Otherwise, the output will be the signed PE binary.
- --token=token
- When used with --unlock or --sign, use the specified NSS token's certificate database.
- --certificate=nickname
- When used with --sign, use the certificate database entry with the specified nickname for signing.
- --kill
-
Terminate the signing server.
SEE ALSO
pesign(1)AUTHORS
Peter Jones
| Mon Oct 15 2012 |
Visit the GSP FreeBSD Man Page Interface.
Output converted with ManDoc.