File debian.prerm of Package efitools
#!/bin/bash
KEYDIR=/usr/share/efitools/keys
EFIDIR=/usr/share/efitools/efi
USBDIR=/usr/share/efitools/usb
# remove the keys if we're not upgrading
if [ "$1" = "0" -o "$1" != "upgrade" ]; then
for key in PK KEK db noPK; do
rm -f ${KEYDIR}/${key}.crt
rm -f ${KEYDIR}/${key}.cer
rm -f ${KEYDIR}/${key}.key
rm -f ${KEYDIR}/${key}.esl
rm -f ${KEYDIR}/${key}.auth
done
#remove all the signed binaries
rm -f ${EFIDIR}/*-signed.efi
fi