1digidoc-tool(1) digidoc-tool man page digidoc-tool(1)
2
3
4
6 digidoc-tool - open/create/verify ASiC-E/ASiC-S/BDoc format files
7
9 digidoc-tool COMMAND [OPTIONS] FILE
10
12 Command create:
13 Example: digidoc-tool create --file=file1.txt --file=file2.txt demo-
14 container.asice
15 Available options:
16 --file= - File(s) to be signed. The option can occur multi‐
17 ple times.
18 --mime= - Specifies the file's mime-type value. When used
19 then must be written right
20 after the "-file" parameter. Default value is ap‐
21 plication/octet-stream
22 --dontsign - Don't sign the newly created container.
23 for additional options look sign command
24
25 Command createBatch:
26 Example: digidoc-tool createBatch folder/content/to/sign
27 Available options:
28 for additional options look sign command
29
30 Command open:
31 Example: digidoc-tool open container-file.asice
32 Available options:
33 --warnings=(ignore,warning,error) - warning handling (default warn‐
34 ing)
35 --policy=(POLv1,POLv2) - Signature Validation Policy (default
36 POLv2)
37 http://open-eid.github.io/SiVa/siva/appen‐
38 dix/validation_policy/
39 --extractAll[=path] - extracts documents without validating sig‐
40 natures (to path when provided)
41 --validateOnExtract - validates container before extracting
42 files
43
44 Command add:
45 Example: digidoc-tool add --file=file1.txt container-file.asice
46 Available options:
47 --file and --mime look create command for info
48
49 Command remove:
50 Example: digidoc-tool remove --document=0 --document=1 --signature=1
51 container-file.asice
52 Available options:
53 --document= - documents to remove
54 --signature= - signatures to remove
55
56 Command websign:
57 Example: digidoc-tool websign --cert=signer.crt demo-container.asice
58 Available options:
59 --cert= - signer token certificate
60 for additional options look sign command
61
62 Command sign:
63 Example: digidoc-tool sign demo-container.asice
64 Available options:
65 --profile= - signature profile, TS, TSA, time-stamp, time-
66 stamp-archive
67 --XAdESEN - use XAdES EN profile
68 --city= - city of production place
69 --street= - streetAddress of production place in XAdES EN pro‐
70 file
71 --state= - state of production place
72 --postalCode= - postalCode of production place
73 --country= - country of production place
74 --role= - option can occur multiple times. Signer role(s)
75 --pkcs11[=] - default is opensc-pkcs11.so. Path of PKCS11
76 driver.
77 --pkcs12= - pkcs12 signer certificate (use --pin for password)
78 --pin= - default asks pin from prompt
79 --sha(224,256,384,512) - set default digest method (default sha256)
80 --sigsha(224,256,384,512) - set default digest method (default
81 sha256)
82 --sigpsssha(224,256,384,512) - set default digest method using RSA
83 PSS (default sha256, same as --sigsha* with --rsapss)
84 --rsapkcs15 - Use RSA PKCS1.5 padding
85 --rsapss - Use RSA PSS padding
86 --tsurl - option to change TS URL (default
87 http://demo.sk.ee/tsa)
88 --dontValidate - Don't validate container on signature creation
89
90 All commands:
91 --nocolor - Disable terminal colors
92 --loglevel=[0,1,2,3,4] - Log level 0 - none, 1 - error, 2 - warn‐
93 ing, 3 - info, 4 - debug
94 --logfile= - File to log, empty to console
95
97 qdigidoc4(1)
98
99
100
1013.16.0.0 digidoc-tool(1)