1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
|
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>Manpage of XMLSEC1</title>
</head>
<body><table witdh="100%" valign="top"><tr valign="top">
<td valign="top" align="left" width="210">
<img src="images/logo.gif" alt="XML Security Library" border="0"><p></p>
<ul>
<li><a href="index.html">Home</a></li>
<li><a href="download.html">Download</a></li>
<li><a href="news.html">News</a></li>
<li><a href="documentation.html">Documentation</a></li>
<ul>
<li><a href="faq.html">FAQ</a></li>
<li><a href="api/xmlsec-notes.html">Tutorial</a></li>
<li><a href="api/xmlsec-reference.html">API reference</a></li>
<li><a href="api/xmlsec-examples.html">Examples</a></li>
</ul>
<li><a href="xmldsig.html">XML Digital Signature</a></li>
<ul><li><a href="http://www.aleksey.com/xmlsec/xmldsig-verifier.html">Online Verifier</a></li></ul>
<li><a href="xmlenc.html">XML Encryption</a></li>
<li><a href="c14n.html">XML Canonicalization</a></li>
<li><a href="bugs.html">Reporting Bugs</a></li>
<li><a href="http://www.aleksey.com/pipermail/xmlsec">Mailing list</a></li>
<li><a href="related.html">Related</a></li>
</ul>
<table width="100%">
<tr>
<td width="15"></td>
<td><a href="http://xmlsoft.org/"><img src="images/libxml2-logo.png" alt="LibXML2" border="0"></a></td>
</tr>
<tr>
<td width="15"></td>
<td><a href="http://xmlsoft.org/XSLT"><img src="images/libxslt-logo.png" alt="LibXSLT" border="0"></a></td>
</tr>
<tr>
<td width="15"></td>
<td><a href="http://www.openssl.org/"><img src="images/openssl-logo.png" alt="OpenSSL" border="0"></a></td>
</tr>
</table>
</td>
<td valign="top"><table width="100%" valign="top">
<tr><td valign="top" align="left" id="xmlsecContent">
<h1>XMLSEC1</h1>
<p> Section: User Commands (1)<br>Updated: June 2003<br><a href="#index">Index</a> <a href="http://localhost/cgi-bin/man/man2html">Return to Main Contents</a>
</p>
<hr>
<a name="lbAB"> </a><h2>NAME</h2>
<p> xmlsec1 - manual page for xmlsec1 1.0.2 (openssl) <a name="lbAC"> </a> </p>
<h2>SYNOPSIS</h2>
<b>xmlsec</b><i><command> </i><p>[<i><options></i>] [<i><file></i>] <a name="lbAD"> </a> </p>
<h2>DESCRIPTION</h2>
<p> xmlsec is a command line tool for signing, verifying, encrypting and decrypting XML documents. The allowed <command> values are: </p>
<dl compact>
<dt><b>--help</b></dt>
<dd> display this help information and exit </dd>
<dt><b>--help-all</b></dt>
<dd> display help information for all commands/options and exit </dd>
<dt>
<b>--help-</b><cmd></dt>
<dd> display help information for command <cmd> and exit </dd>
<dt><b>--version</b></dt>
<dd> print version information and exit </dd>
<dt><b>--keys</b></dt>
<dd> keys XML file manipulation </dd>
<dt><b>--sign</b></dt>
<dd> sign data and output XML document </dd>
<dt><b>--verify</b></dt>
<dd> verify signed document </dd>
<dt><b>--sign-tmpl</b></dt>
<dd> create and sign dynamicaly generated signature template </dd>
<dt><b>--encrypt</b></dt>
<dd> encrypt data and output XML document </dd>
<dt><b>--decrypt</b></dt>
<dd> decrypt data from XML document </dd>
<dt><b>--xkis-server-locate</b></dt>
<dd> process data as XKMS/XKISS Locate request </dd>
<dt><b>--xkis-server-validate</b></dt>
<dd> process data as XKMS/XKISS Validate request </dd>
</dl>
<a name="lbAE"> </a><h2>OPTIONS</h2>
<dl compact>
<dt> <b>--ignore-manifests</b> <dt></dt>
</dt>
<dd> <dd>do not process <dsig:Manifest> elements </dd>
</dd>
<dt> <b>--store-references</b> <dt></dt>
</dt>
<dd> <dd>store and print the result of <dsig:Reference/> element processing just before calculating digest </dd>
</dd>
<dt> <b>--store-signatures</b> <dt></dt>
</dt>
<dd> <dd>store and print the result of <dsig:Signature> processing just before calculating signature </dd>
</dd>
<dt> <b>--enabled-reference-uris</b> <list> <dt></dt>
</dt>
<dd> <dd>comma separated list of of the following values: "empty", "same-doc", "local","remote" to restrict possible URI attribute values for the <dsig:Reference> element </dd>
</dd>
<dt> <b>--binary-data</b> <file> <dt></dt>
</dt>
<dd> <dd>binary <file> to encrypt </dd>
</dd>
<dt> <b>--xml-data</b> <file> <dt></dt>
</dt>
<dd> <dd>XML <file> to encrypt </dd>
</dd>
<dt> <b>--enabled-cipher-reference-uris</b> <list> <dt></dt>
</dt>
<dd> <dd>comma separated list of of the following values: "empty", "same-doc", "local","remote" to restrict possible URI attribute values for the <enc:CipherReference> element </dd>
</dd>
<dt> <b>--session-key</b> <keyKlass>-<keySize> <dt></dt>
</dt>
<dd> <dd>generate new session <keyKlass> key of <keySize> bits size (for example, "--session des-192" generates a new 192 bits DES key for DES3 encryption) </dd>
</dd>
<dt> <b>--output</b> <filename> <dt></dt>
</dt>
<dd> <dd>write result document to file <filename> </dd>
</dd>
<dt> <b>--print-debug</b> <dt></dt>
</dt>
<dd> <dd>print debug information to stdout </dd>
</dd>
<dt> <b>--print-xml-debug</b> <dt></dt>
</dt>
<dd> <dd>print debug information to stdout in xml format </dd>
</dd>
<dt> <b>--dtd-file</b> <file> <dt></dt>
</dt>
<dd> <dd>load the specified file as the DTD </dd>
</dd>
<dt> <b>--node-id</b> <id> <dt></dt>
</dt>
<dd> <dd>set the operation start point to the node with given <id> </dd>
</dd>
<dt> <b>--node-name</b> [<namespace-uri>:]<name> <dt></dt>
</dt>
<dd> <dd>set the operation start point to the first node with given <name> and <namespace> URI </dd>
</dd>
<dt> <b>--node-xpath</b> <expr> <dt></dt>
</dt>
<dd> <dd>set the operation start point to the first node selected by the specified XPath expression </dd>
</dd>
<dt> <b>--enabled-key-data</b> <list> <dt></dt>
</dt>
<dd> <dd>comma separated list of enabled key data (list of registered key data klasses is available with "--list-key-data" command); by default, all registered key data are enabled </dd>
</dd>
<dt> <b>--enabled-retrieval-uris</b> <list> <dt></dt>
</dt>
<dd> <dd>comma separated list of of the following values: "empty", "same-doc", "local","remote" to restrict possible URI attribute values for the <dsig:RetrievalMethod> element. </dd>
</dd>
<dt> <b>--gen-key[</b>:<name>] <keyKlass>-<keySize> <dt></dt>
</dt>
<dd> <dd>generate new <keyKlass> key of <keySize> bits size, set the key name to <name> and add the result to keys manager (for example, "--gen:mykey rsa-1024" generates a new 1024 bits RSA key and sets it's name to "mykey") </dd>
</dd>
<dt> <b>--keys-file</b> <file> <dt></dt>
</dt>
<dd> <dd>load keys from XML file </dd>
</dd>
<dt> <b>--privkey-pem[</b>:<name>] <file>[,<cafile>[,<cafile>[...]]] <dt></dt>
</dt>
<dd> <dd>load private key from PEM file and certificates that verify this key </dd>
</dd>
<dt> <b>--privkey-der[</b>:<name>] <file>[,<cafile>[,<cafile>[...]]] <dt></dt>
</dt>
<dd> <dd>load private key from DER file and certificates that verify this key </dd>
</dd>
<dt> <b>--pubkey-pem[</b>:<name>] <file> <dt></dt>
</dt>
<dd> <dd>load public key from PEM file </dd>
</dd>
<dt> <b>--pubkey-der[</b>:<name>] <file> <dt></dt>
</dt>
<dd> <dd>load public key from DER file </dd>
</dd>
<dt> <b>--aeskey[</b>:<name>] <file> <dt></dt>
</dt>
<dd> <dd>load AES key from binary file <file> </dd>
</dd>
<dt> <b>--deskey[</b>:<name>] <file> <dt></dt>
</dt>
<dd> <dd>load DES key from binary file <file> </dd>
</dd>
<dt> <b>--hmackey[</b>:<name>] <file> <dt></dt>
</dt>
<dd> <dd>load HMAC key from binary file <file> </dd>
</dd>
<dt> <b>--pwd</b> <password> <dt></dt>
</dt>
<dd> <dd>the password to use for reading keys and certs </dd>
</dd>
<dt> <b>--pkcs12[</b>:<name>] <file> <dt></dt>
</dt>
<dd> <dd>load load private key from pkcs12 file <file> </dd>
</dd>
<dt> <b>--trusted-pem</b> <file> <dt></dt>
</dt>
<dd> <dd>load trusted (root) certificate from PEM file <file> </dd>
</dd>
<dt> <b>--untrusted-pem</b> <file> <dt></dt>
</dt>
<dd> <dd>load untrusted certificate from PEM file <file> </dd>
</dd>
<dt> <b>--trusted-der</b> <file> <dt></dt>
</dt>
<dd> <dd>load trusted (root) certificate from DER file <file> </dd>
</dd>
<dt> <b>--untrusted-der</b> <file> <dt></dt>
</dt>
<dd> <dd>load untrusted certificate from DER file <file> </dd>
</dd>
<dt> <b>--verification-time</b> <time> <dt></dt>
</dt>
<dd> <dd>the local time in "YYYY-MM-DD HH:MM:SS" format used certificates verification </dd>
</dd>
<dt> <b>--depth</b> <number> <dt></dt>
</dt>
<dd> <dd>maximum certificates chain depth </dd>
</dd>
<dt> <b>--crypto-config</b> <dt></dt>
</dt>
<dd> <dd>path to crypto engine configuration </dd>
</dd>
<dt> <b>--repeat</b> <number> <dt></dt>
</dt>
<dd> <dd>repeat the operation <number> times </dd>
</dd>
<dt> <b>--disable-error-msgs</b> <dt></dt>
</dt>
<dd> <dd>do not print xmlsec error messages </dd>
</dd>
<dt> <b>--print-crypto-error-msgs</b> <dt></dt>
</dt>
<dd> <dd>print openssl errors stack at the end </dd>
</dd>
<dt> <b>--help</b> <dt></dt>
</dt>
<dd> <dd>print help information about the command </dd>
</dd>
</dl>
<a name="lbAF"> </a><h2>AUTHOR</h2>
<p> Written by Aleksey Sanin <<a href="mailto:aleksey@aleksey.com">aleksey@aleksey.com</a>>. <a name="lbAG"> </a> </p>
<h2>REPORTING BUGS</h2>
<p> Report bugs to <a href="http://www.aleksey.com/xmlsec/bugs.html">http://www.aleksey.com/xmlsec/bugs.html</a> <a name="lbAH"> </a> </p>
<h2>COPYRIGHT</h2>
<p> Copyright © 2002-2003 Aleksey Sanin. <br> This is free software: see the source for copying information. <a name="lbAI"> </a> </p>
<h2>SEE ALSO</h2>
<p> The full documentation for <b>xmlsec1</b> is maintained as a Texinfo manual. If the <b>info</b> and <b>xmlsec1</b> programs are properly installed at your site, the command </p>
<dl compact>
<dt></dt>
<dd> <b>info xmlsec1</b> </dd>
</dl>
<p> should give you access to the complete manual. </p>
<p> </p>
<hr>
<a name="index"> </a><h2>Index</h2>
<dl>
<dt><a href="#lbAB">NAME</a></dt>
<dd> </dd>
<dt><a href="#lbAC">SYNOPSIS</a></dt>
<dd> </dd>
<dt><a href="#lbAD">DESCRIPTION</a></dt>
<dd> </dd>
<dt><a href="#lbAE">OPTIONS</a></dt>
<dd> </dd>
<dt><a href="#lbAF">AUTHOR</a></dt>
<dd> </dd>
<dt><a href="#lbAG">REPORTING BUGS</a></dt>
<dd> </dd>
<dt><a href="#lbAH">COPYRIGHT</a></dt>
<dd> </dd>
<dt><a href="#lbAI">SEE ALSO</a></dt>
<dd> </dd>
</dl>
<hr>
<p> This document was created by <a href="http://localhost/cgi-bin/man/man2html">man2html</a>, using the manual pages.<br> Time: 03:37:21 GMT, June 02, 2003 </p>
</td></tr>
<tr><td>
<br><br><p><a href="bugs.html">Aleksey Sanin</a></p>
</td></tr>
</table></td>
</tr></table></body>
</html>
|
