xsec-checksig.pod(1)

✨ NAME ✨

xmlsec-checksig — okay bestie, this is the little tool that checks a digital signature embedded in an XML file 💖 it lives inside the xsec-checksig.pod manual page, section 1, and it's giving "I verify things and I'm lowkey iconic about it" ✨

---

🌸 SYNOPSIS 🌸

xmlsec-checksig [-s] [-h string] [-x] [-d ns-uri name]
    [-i] [--id name] input

---

🦋 DESCRIPTION 🦋

So here's the vibe: xmlsec-checksig checks a digital signature that's embedded in an XML file, and it does it using the Apache XML Security for C++ library 👑

It reads the XML document you want to check from the input file you hand it, and it expects the signature to follow the XML Digital Signature and Encryption specifications. That's the whole assignment. That's what it does. Slay 💅

---

🎀 OPTIONS 🎀

Heads up bestie: each option has to be given as a separate argument. No squishing them together, no cap 🙅‍♀️

• --hmackey string, -h string — use the HMAC key that you specify with string 🔑
• --id name — use the attribute id with the name name. And if you also wanna specify the namespace? Use --idns instead, okurrr 🫶
• --idns ns-uri name, -d ns-uri name — use the attribute id that's specified by the namespace URI ns-uri and the name name 🌈
• --interop, -i* — use the interop resolver for the Baltimore interop examples 🧚
• --skiprefs, -s* — skip checking references and only check the signature. Just the signature. Nothing else. Focused queen ✨
• --xsecresolver, -x* — use the Apache XML Security for C++ test XMLDSig URI resolver 💜

---

⭐ RETURN STATUS ⭐

Okay so the exit codes are basically a vibe check for your signature:

• xmlsec-checksig exits with status 0 if the signature is valid 🎉
• it exits with status 1 if the signature is not valid 😭
• and if it cannot process the input file for some reason, it exits with status 2 💀

---

💜 AUTHOR 💜

This manual page was written by Russ Allbery for Debian 🫶

---

👑 MANUAL LICENSE 👑

The authors hereby relinquish any claim to any copyright that they may have in this work, whether granted under contract or by operation of law or international treaty, and hereby commit to the public, at large, that they shall not, at any time in the future, seek to enforce any copyright in this work against any person or entity, or prevent any person or entity from copying, publishing, distributing or creating derivative works of this work.

---

and that's the whole page, bestie!! 🎀 this was XML Security version 3.0.0, dated 2025-01-11 — go forth and verify those signatures, mwah 💖✨🦋