Extract TPM digests, remove quotes and create an EFI signature list

tpm_digest.sh

#!/bin/bash
# https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot#Enrolling_Option_ROM_digests

digests=$(grep -o 'Digest: "[a-f0-9]\{64\}"' | sed 's/Digest: "//;s/"$//')
counter=1
: > OpROM.esl

for digest in ${digests}; do
  output_file="OpROM${counter}.esl"
  digest-to-efi-sig-list "${digest}" "$output_file"
  cat "${output_file}" >> OpROM.esl
  counter=$((counter + 1))
done

printf "Combined EFI signature list created in OpROM.esl"