PESIGCHECK(1)

📦
version 117 · 2 versions
  • 117 · arch rolling, centos-stream 10, centos-stream 9, debian trixie, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, opensuse-leap 16.0, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking (latest)
  • 0.112 · debian bookworm, ubuntu jammy
, in arch rolling, centos-stream 10, centos-stream 9, debian trixie, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, opensuse-leap 16.0, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

👑 PESIGCHECK — bestie's guide to verifying UEFI applications 💅

okay so this is pesigcheck, from the General Commands Manual section (section 1, fr fr), and it's literally the tool you call when you need to check that a UEFI application's signature is actually, you know, valid. ✨

🌸 NAME 🌸

pesigcheck — a tool for verifying UEFI applications 🦋

🎀 SYNOPSIS 🎀

pesigcheck -i file [-n] [-D file] [-X file] [-c file] [-q] [-v]

That's the whole vibe. One required thing, a bunch of optional lil extras. 👑

💖 DESCRIPTION 💖

pesigcheck is a command line tool for verifying the signature of UEFI applications. That's it, that's the job. No cap. 🫶

✨ OPTIONS ✨

Here's the part where I hold your hand through every single flag, because there are no skips in this house. 💅

  • -i file, --in file — the PE binary file that's getting checked. This one is the whole point, bestie. 🍓
  • -n, --no-system-db — inhibits the use of DB and DBX from the running system. Basically: "don't touch my live system's databases, thank u." 🙈
  • -D file, --dbfile file — an EFI Signature List or EFI variable file to be used as the allowed security database. 🟢

may be used more than once — so yes, stack them up, queen. 💅

  • -X file, --dbxfile file — an EFI Signature List or EFI variable file to be used as the blacklisted security database. 🔴

may be used more than once — again, multiple is fine. 🎀

  • -c file, --certfile file — a DER-encoded certificate Ar file to be added to the allowed security database. 🧚

may be used more than once — go off, add as many as you need. ✨

  • -q, --quiet — be quieter. shhh. 🤫
  • -v, --verbose — be more verbose. tell me everything, king. 🗣️

📜 STANDARDS 📜

UEFI Specification Working Group, Unified Extensible Firmware Interface (UEFI) Specification Version 2.8, Unified Extensible Firmware Interface Forum, https://uefi.org/specifications, March 2019.

Like, that's the actual spec, go read it if you want the lore. 📚

🦋 SEE ALSO 🦋

authvar(1), pesign(1), efisigdb(1)

the squad. run them together, iykyk. 💜

🌈 AUTHORS 🌈

Peter Jones — the main character who wrote this. 👑

and that's a wrap on the Linux version, dated Jun 4, 2020, with that lil $ version tag sitting pretty next to it — periodt. 💖

📦 where this page comes from