1pdfsig(1)                   General Commands Manual                  pdfsig(1)
2
3
4

NAME

6       pdfsig - Portable Document Format (PDF) digital signatures tool
7

SYNOPSIS

9       pdfsig [options] [PDF-file] [Output-file]
10

DESCRIPTION

12       pdfsig verifies the digital signatures in a PDF document.  It also dis‐
13       plays the identity of each signer (commonName field  and  full  distin‐
14       guished  name of the signer certificate), the time and date of the sig‐
15       nature, the hash algorithm used for signing, the type of the  signature
16       as  stated in the PDF and the signed ranges with a statement wether the
17       total document is signed.  Moreover, with option -sign it  can  sign  a
18       PDF document.
19
20       The  signer certificate validation uses the trusted certificates stored
21       in the Network Security Services (NSS) Database. The  NSS  Database  is
22       searched for in the following locations:
23
24       •      If  the  -nssdir option is specified, the directory specified by
25              this option.
26
27       •      The NSS Certificate database in  the  default  Firefox  profile.
28              i.e. $HOME/.mozilla/firefox/*.default.
29
30       •      The NSS Certificate database in /etc/pki/nssdb.
31

OPTIONS

33       -nssdir [prefix]directory
34              Specify  the  database  directory containing the certificate and
35              key database files. See certutil(1) -d option for details of the
36              prefix. If not specified the other search locations described in
37              DESCRIPTION are used.
38
39       -nocert
40              Do not validate the certificate.
41
42       -dump  Dump all signatures into current directory.  -sign  number  Sign
43              the document in the signature field with the given number.
44
45       -nick  nickname
46              Use the certificate with the given nickname for signing.
47
48       -kpw  password
49              Use  the given password for the signing key (this might be miss‐
50              ing if the key isn't password protected).
51
52       -digest  algorithm
53              Use the given digest algorithm for signing (default: SHA256).
54
55       -reason  reason
56              Set the given reason string for the signature (default: no  rea‐
57              son set).
58
59       -etsi  Create  a  signature  of  type  ETSI.CAdES.detached  instead  of
60              adbe.pkcs7.detached.
61
62       -v     Print copyright and version information.
63
64       -h     Print usage information.  (-help and --help are equivalent.)
65

AUTHOR

67       The pdfsig software and documentation are copyright 1996-2004  Glyph  &
68       Cog,  LLC  and copyright 2005-2015 The Poppler Developers - http://pop‐
69       pler.freedesktop.org
70

SEE ALSO

72       pdfdetach(1),  pdffonts(1),  pdfimages(1),  pdfinfo(1),  pdftocairo(1),
73       pdftohtml(1),  pdftoppm(1),  pdftops(1),  pdftotext(1)  pdfseparate(1),
74       pdfunite(1) certutil(1)
75
76
77
78                                28 October 2015                      pdfsig(1)
Impressum