PESIGN-CLIENT(1)

✨ PESIGN-CLIENT(1) ✨

okay bestie, welcome to pesign-client — a General Commands Manual page and honestly? a whole vibe 💅

🦋 NAME 🦋

pesign-client — the tool for signing UEFI applications with a pesign server. no cap, that's literally what it does 🎀

🌸 SYNOPSIS 🌸

pesign-client [-i file] [-o file] [-e file] [-t token] [-c nickname]
              ⟨[-k |] [-q |] [-s |] [-u]⟩ [-f fd] [-F file]

look at those cute little angle brackets, they're giving "choose your own adventure" energy 🔥

💖 DESCRIPTION 💖

pesign-client is a command line tool for manipulating signatures and cryptographic digests of UEFI applications. that's it, that's the whole thing — she does signatures, she does digests, she serves 👑

✨ OPTIONS ✨

• -i file, --infile file — the input binary file to be signed with --sign. this is the file you're handing over to get signed, your lil baby 🥺
• -o file, --outfile file — the output binary file to be signed with --sign. where the signed version lands, freshly glow-upped ✨
• -e file, --export file — export signature from --sign to file. yeet that signature into a file of your choosing 📤
• -t token, --token token — sign using NSS token token. tell her which token to use, she's not a mind reader 💅
• -c nickname, --certificate nickname — sign using NSS certificate nickname. name-drop your certificate, main character energy only 👑
• -k, --kill — kill the pesign server. dramatic? yes. necessary sometimes? also yes 💀
• -q, --is-unlocked — query the lock status of the token specified by --token. just checking in on your token, making sure it's okay 🫶
• -s, --sign — sign the file specified by --infile. the moment we've all been waiting for, the actual signing, ate 💅
• -u, --unlock — unlock the token specified with --token using the PIN read from --pinfd or --pinfile, or specified by PESIGN_TOKEN_PIN. free her from PIN jail 🔓
• -f fd, --pinfd fd — file descriptor to read the PIN from for --unlock. feeding the PIN in through a file descriptor, sneaky and iconic 🍓
• -F file, --pinfile file — file to read the PIN from for unlock. same idea, but a whole file this time, she contains multitudes 📁

🌈 ENVIRONMENT 🌈

• PESIGN_TOKEN_PIN — PIN for use with --unlock for the token specified by -fl -token. yes bestie, that's exactly what it says, we don't make the rules, we just report them faithfully 🙈

💜 SEE ALSO 💜

pesign(1), certutil(1)

go read those too, they're the supporting cast and they're lowkey essential 🧚

⭐ AUTHORS ⭐

Peter Jones — legend, icon, the moment 👑

and that's the page fr fr 🌸 — this is Linux, dated Jun 4, 2020, and yes the header up top said PESIGN-CLIENT(1) and the manual name is General Commands Manual, now you know the whole lore. slay, stay signed, bye bestie 💖✨🎀