Packaging Digital Signatures

For comments/suggestions, please reach me at: https://www.linkedin.com/in/sameer-pasha-616848192 This video describes various methods of packaging digital signatures. NOTE: Replace ANGLE_BRACKET with greater-sign in below. Signature Envelope Generation: openssl smime -sign -in Plaintext.txt -signer PK.crt -inkey PK.key ANGLE_BRACKET Signed-Plaintext.txt openssl smime -verify -in Signed-Plaintext.txt -signer PK.crt -noverify ================ PECoff / EFI File signature appending: sbsign --key PK.key --cert PK.crt --output HW_Signed.efi HW_Unsigned.efi sbverify --cert PK.crt HW_Signed.efi =============== RPM Signature inserted before header: rpm -Kv hello.rpm rpm --define "_gpg_name Acme Corp" --addsign hello.rpm ============== Detached Signatures: openssl smime -sign -binary -in Plaintext.txt -signer PK.crt -inkey PK.key -outform der -out file.p7b openssl smime -verify -binary -inform der -in file.p7b -content Plaintext.txt -noverify =============