.\" Automatically generated by Pod::Man 4.07 (Pod::Simple 3.32)
.\"
.\" Standard preamble:
.\" ========================================================================
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Vb \" Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \" End verbatim text
.ft R
.fi
..
.\" Set up some character translations and predefined strings.  \*(-- will
.\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
.\" double quote, and \*(R" will give a right double quote.  \*(C+ will
.\" give a nicer C++.  Capital omega is used to do unbreakable dashes and
.\" therefore won't be available.  \*(C` and \*(C' expand to `' in nroff,
.\" nothing in troff, for use with C<>.
.tr \(*W-
.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
.ie n \{\
.    ds -- \(*W-
.    ds PI pi
.    if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
.    if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\"  diablo 12 pitch
.    ds L" ""
.    ds R" ""
.    ds C` ""
.    ds C' ""
'br\}
.el\{\
.    ds -- \|\(em\|
.    ds PI \(*p
.    ds L" ``
.    ds R" ''
.    ds C`
.    ds C'
'br\}
.\"
.\" Escape single quotes in literal strings from groff's Unicode transform.
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\"
.\" If the F register is >0, we'll generate index entries on stderr for
.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
.\" entries marked with X<> in POD.  Of course, you'll have to process the
.\" output yourself in some meaningful fashion.
.\"
.\" Avoid warning from groff about undefined register 'F'.
.de IX
..
.if !\nF .nr F 0
.if \nF>0 \{\
.    de IX
.    tm Index:\\$1\t\\n%\t"\\$2"
..
.    if !\nF==2 \{\
.        nr % 0
.        nr F 2
.    \}
.\}
.\"
.\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
.\" Fear.  Run.  Save yourself.  No user-serviceable parts.
.    \" fudge factors for nroff and troff
.if n \{\
.    ds #H 0
.    ds #V .8m
.    ds #F .3m
.    ds #[ \f1
.    ds #] \fP
.\}
.if t \{\
.    ds #H ((1u-(\\\\n(.fu%2u))*.13m)
.    ds #V .6m
.    ds #F 0
.    ds #[ \&
.    ds #] \&
.\}
.    \" simple accents for nroff and troff
.if n \{\
.    ds ' \&
.    ds ` \&
.    ds ^ \&
.    ds , \&
.    ds ~ ~
.    ds /
.\}
.if t \{\
.    ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
.    ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
.    ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
.    ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
.    ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
.    ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
.\}
.    \" troff and (daisy-wheel) nroff accents
.ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
.ds 8 \h'\*(#H'\(*b\h'-\*(#H'
.ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
.ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
.ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
.ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
.ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
.ds ae a\h'-(\w'a'u*4/10)'e
.ds Ae A\h'-(\w'A'u*4/10)'E
.    \" corrections for vroff
.if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
.if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
.    \" for low resolution devices (crt and lpr)
.if \n(.H>23 .if \n(.V>19 \
\{\
.    ds : e
.    ds 8 ss
.    ds o a
.    ds d- d\h'-1'\(ga
.    ds D- D\h'-1'\(hy
.    ds th \o'bp'
.    ds Th \o'LP'
.    ds ae ae
.    ds Ae AE
.\}
.rm #[ #] #H #V #F C
.\" ========================================================================
.\"
.IX Title "xsec-checksig.pod 1"
.TH xsec-checksig.pod 1 "2019-03-22" "2.0.2" "Apache XML Security"
.\" For nroff, turn off justification.  Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
.nh
.SH "NAME"
xmlsec\-checksig \- Check a signature embedded in an XML file
.SH "SYNOPSIS"
.IX Header "SYNOPSIS"
\&\fBxmlsec-checksig\fR [\fB\-s\fR] [\fB\-h\fR \fIstring\fR] [\fB\-x\fR] [\fB\-d\fR \fIns-uri\fR \fIname\fR]
    [\fB\-i\fR] [\fB\-\-id\fR \fIname\fR] \fIinput\fR
.SH "DESCRIPTION"
.IX Header "DESCRIPTION"
\&\fBxmlsec-checksig\fR checks a digital signature embedded in an \s-1XML\s0 file
using the Apache \s-1XML\s0 Security for \*(C+ library.  It reads the \s-1XML\s0 document
to check from the provided \fIinput\fR file and expects the signature to
follow the \s-1XML\s0 Digital Signature and Encryption specifications.
.SH "OPTIONS"
.IX Header "OPTIONS"
Note that each option must be given as a separate argument.
.IP "\fB\-\-hmackey\fR \fIstring\fR, \fB\-h\fR \fIstring\fR" 4
.IX Item "--hmackey string, -h string"
Use the \s-1HMAC\s0 key specified by \fIstring\fR.
.IP "\fB\-\-id\fR \fIname\fR" 4
.IX Item "--id name"
Use the attribute id with name \fIname\fR.  To also specify the namespace,
use \fB\-\-idns\fR instead.
.IP "\fB\-\-idns\fR \fIns-uri\fR \fIname\fR, \fB\-d\fR \fIns-uri\fR \fIname\fR" 4
.IX Item "--idns ns-uri name, -d ns-uri name"
Use the attribute id specified by the namespace \s-1URI \s0\fIns-uri\fR and the name
\&\fIname\fR.
.IP "\fB\-\-interop\fR, \fB\-i\fR" 4
.IX Item "--interop, -i"
Use the interop resolver for the Baltimore interop examples.
.IP "\fB\-\-skiprefs\fR, \fB\-s\fR" 4
.IX Item "--skiprefs, -s"
Skip checking references and only check the signature.
.IP "\fB\-\-xsecresolver\fR, \fB\-x\fR" 4
.IX Item "--xsecresolver, -x"
Use the Apache \s-1XML\s0 Security for \*(C+ test XMLDSig \s-1URI\s0 resolver.
.SH "RETURN STATUS"
.IX Header "RETURN STATUS"
\&\fBxmlsec-checksig\fR exits with status 0 if the signature is valid and with
status 1 if the signature is not valid.  If it cannot process the input
file for some reason, it exits with status 2.
.SH "AUTHOR"
.IX Header "AUTHOR"
This manual page was written by Russ Allbery for Debian.
.SH "MANUAL LICENSE"
.IX Header "MANUAL LICENSE"
The authors hereby relinquish any claim to any copyright that they may
have in this work, whether granted under contract or by operation of law
or international treaty, and hereby commit to the public, at large, that
they shall not, at any time in the future, seek to enforce any copyright
in this work against any person or entity, or prevent any person or entity
from copying, publishing, distributing or creating derivative works of
this work.