.\" -*- mode: troff; coding: utf-8 -*-
.\" Automatically generated by Pod::Man 5.01 (Pod::Simple 3.43)
.\"
.\" Standard preamble:
.\" ========================================================================
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Vb \" Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \" End verbatim text
.ft R
.fi
..
.\" \*(C` and \*(C' are quotes in nroff, nothing in troff, for use with C<>.
.ie n \{\
.    ds C` ""
.    ds C' ""
'br\}
.el\{\
.    ds C`
.    ds C'
'br\}
.\"
.\" Escape single quotes in literal strings from groff's Unicode transform.
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\"
.\" If the F register is >0, we'll generate index entries on stderr for
.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
.\" entries marked with X<> in POD.  Of course, you'll have to process the
.\" output yourself in some meaningful fashion.
.\"
.\" Avoid warning from groff about undefined register 'F'.
.de IX
..
.nr rF 0
.if \n(.g .if rF .nr rF 1
.if (\n(rF:(\n(.g==0)) \{\
.    if \nF \{\
.        de IX
.        tm Index:\\$1\t\\n%\t"\\$2"
..
.        if !\nF==2 \{\
.            nr % 0
.            nr F 2
.        \}
.    \}
.\}
.rr rF
.\" ========================================================================
.\"
.IX Title "xsec-templatesign.pod 1"
.TH xsec-templatesign.pod 1 2024-03-09 2.0.4 "Apache XML Security"
.\" For nroff, turn off justification.  Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
.nh
.SH NAME
xmlsec\-templatesign \- Sign a template XML signature file
.SH SYNOPSIS
.IX Header "SYNOPSIS"
\&\fBxmlsec-templatesign\fR [\fB\-s\fR \fIdistinguished-name\fR] [\fB\-h\fR \fIstring\fR] [\fB\-c\fR]
    (\fB\-d\fR | \fB\-e\fR | \fB\-r\fR) \fIprivate-key\fR \fIpassword\fR \fIinput\fR
.SH DESCRIPTION
.IX Header "DESCRIPTION"
\&\fBxmlsec-templatesign\fR signs a template XML signature file using the
Apache XML Security for C++ library.  The resulting signed file is printed
to standard output.  The signing key is specified with one of \fB\-d\fR (for a
DSA key), \fB\-e\fR (for an EC key), or \fB\-r\fR (for an RSA key).  The key must
be stored in a PEM-encoded file, and the password for that file must be
given on the command line.
.SH OPTIONS
.IX Header "OPTIONS"
Note that each option must be given as a separate argument.
.IP "\fB\-\-dsakey\fR, \fB\-d\fR" 4
.IX Item "--dsakey, -d"
The provided \fIprivate-key\fR file is a PEM-encoded DSA private key.
.IP "\fB\-\-eckey\fR, \fB\-e\fR" 4
.IX Item "--eckey, -e"
The provided \fIprivate-key\fR file is a PEM-encoded EC private key.
.IP "\fB\-\-rsakey\fR, \fB\-r\fR" 4
.IX Item "--rsakey, -r"
The provided \fIprivate-key\fR file is a PEM-encoded RSA private key.
.IP "\fB\-\-clearkeys\fR, \fB\-c\fR" 4
.IX Item "--clearkeys, -c"
Clear out any current KeyInfo elements in the file.
.IP "\fB\-\-hmackey\fR \fIstring\fR, \fB\-h\fR \fIstring\fR" 4
.IX Item "--hmackey string, -h string"
Use the HMAC key specified by \fIstring\fR.
.IP "\fB\-\-x509subjectname\fR \fIname\fR, \fB\-s\fR \fIname\fR" 4
.IX Item "--x509subjectname name, -s name"
The provided \fIname\fR will be set as SubjectName in X.509.
.SH AUTHOR
.IX Header "AUTHOR"
This manual page was written by Russ Allbery for Debian.
.SH "MANUAL LICENSE"
.IX Header "MANUAL LICENSE"
The authors hereby relinquish any claim to any copyright that they may
have in this work, whether granted under contract or by operation of law
or international treaty, and hereby commit to the public, at large, that
they shall not, at any time in the future, seek to enforce any copyright
in this work against any person or entity, or prevent any person or entity
from copying, publishing, distributing or creating derivative works of
this work.