24 lines
432 B
Bash
24 lines
432 B
Bash
|
#!/bin/bash
|
||
|
|
# attach ascii armored signature to a PE binary
|
||
|
|
set -e
|
||
|
|
|
||
|
|
sig="$1"
|
||
|
|
infile="$2"
|
||
|
|
if [ -z "$sig" -o ! -e "$sig" -o -z "$infile" -o ! -e "$infile" ]; then
|
||
|
|
echo "USAGE: $0 sig.asc file.efi"
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
outfile="${infile%.efi}-signed.efi"
|
||
|
|
|
||
|
|
nssdir=`mktemp -d`
|
||
|
|
cleanup()
|
||
|
|
{
|
||
|
|
rm -r "$nssdir"
|
||
|
|
}
|
||
|
|
trap cleanup EXIT
|
||
|
|
echo > "$nssdir/pw"
|
||
|
|
certutil -f "$nssdir/pw" -d "$nssdir" -N
|
||
|
|
|
||
|
|
pesign -n "$nssdir" -m "$sig" -i "$infile" -o "$outfile"
|