new `ubcli crypt` command - command line utility to work with signatures
- new
ubcli crypt
- a command line utility to work with signatures (ubcli crypt --help
for details)
ubcli crypt [command] [args]
Commands:
sign fileName4Sign signFormat [-k privateKeyPath] [-p privateKeyPwd | -i] [-o signatureFn]
Create detached signature for file. Can be combined to container using "ubcli crypto combine"
- if "-k privateKeyPath" is not specified - use key from "ubConfig.security.dstu.iit.keyPath"
- if "-p privateKeyPwd" is not specified - use password from "ubConfig.security.dstu.iit.password",
- "-i" is specified - ask for password form stdin
- "signFormat" can be one of "CAdES", "XAdES"
- "-o signatureFn" is a result file name, if not specified - output result to fileName4Sign folder in fileName4Sign.[p7s|xml]
verify signFn [dataFn]
Verify signature. If "dataFn" is not specified consider "signFn" is container with signature(s) and data
hash fileName [algorithm] [-b]
Calculate hash of file. Default algorithm is GOST (GOST-34311).
- possible algorithm values are "GOST","MD5","SHA1","SHA256","SHA384","SHA512","SHA3_256","SHA3_512"
- default output id base64 encoded hash value; if "-b" specified - hexadecimal
split containerFn [destFolder]
Split container into signatures and optional data
combine dataFn signatureFn [-ss secondarySignatureFn] [-forceAsicS] [-d destFolder]
Combine data with signature (and optionally 2'd signature)
- type of result container is auto-detected, but can be forced to create ASiC-S (if possible)
- second signature can be specified in -ss
- if destination is not specified - will write result to current folder
enumDev Enumerate available devices for private key operations
Edited by Pavlo Mashliakovskiy