2003-10-12 Sebastien Pouliot <[email protected]>

	* chktrust.1: New. Man page for Authenticode chktrust.exe
	* signcode.1: New. Man page for Authenticode signcode.exe
	* sn.1: New. Man page for StrongName sn.exe
	* man.xml: Added new (and missing) entries.

svn path=/trunk/mono/; revision=18911

man/chktrust.1

@@ -0,0 +1,37 @@
+.\" 
+.\" chktrust manual page.
+.\" Copyright 2003 Motus Technologies
+.\" Author:
+.\"   Sebastien Pouliot ([email protected])
+.\"
+.TH Mono "chktrust"
+.SH NAME
+chktrust \- Check the trust of a PE executable.
+.SH SYNOPSIS
+.PP
+.B chktrust [options] filename
+.SH DESCRIPTION
+Verify if an PE executable (CLR assembly, Win32 EXE or DLL) has a valid 
+Authenticode(r) signature that can be traced back to a trusted certificate
+authority (CA).
+.SH OPTIONS
+.TP
+.I "-q", "-quiet"
+Limited display on console.
+.TP
+.I "-v", "-verbose"
+More details displayed on the console.
+.TP
+.I "-help", "-h", "-?", "/?"
+Display help about this tool.
+.SH AUTHOR
+Written by Sebastien Pouliot
+.SH COPYRIGHT
+Copyright (C) 2003 Motus Technologies. 
+Released under BSD license.
+.SH MAILING LISTS
+Visit http://mail.ximian.com/mailman/mono-list for details.
+.SH WEB SITE
+Visit: http://www.go-mono.com for details
+.SH SEE ALSO
+.BR signcode(1), makecert(1)

man/man.xml

@@ -10,5 +10,9 @@
 <manpage name="SecUtil" page="secutil.1" />
 <manpage name="MonoStyle" page="monostyle.1" />
 <manpage name="genxs" page="genxs.1" />
-
+<manpage name="cert2spc" page="cert2spc.1" />
+<manpage name="makecert" page="makecert.1" />
+<manpage name="chktrust" page="chktrust.1" />
+<manpage name="signcode" page="signcode.1" />
+<manpage name="sn" page="sn.1" />
 </manpages>

man/signcode.1

@@ -0,0 +1,81 @@
+.\" 
+.\" signcode manual page.
+.\" Copyright 2003 Motus Technologies
+.\" Author:
+.\"   Sebastien Pouliot ([email protected])
+.\"
+.TH Mono "signcode"
+.SH NAME
+signcode \- Digitally sign an PE executable using an X.509 certificate.
+.SH SYNOPSIS
+.PP
+.B signcode [options] filename
+.SH DESCRIPTION
+Digitally sign an PE executable (CLR assembly, Win32 EXE or DLL) using an 
+X.509 certificate and it's associated private key. The signature is compatible
+with Authenticode(r) and can be validated with chktrust.
+.SH OPTIONS
+.TP
+.I "-spc spcfile"
+The Software Publisher File (spc) that contains the X.509 certificate chain
+used to digitally sign the PE executable.
+.TP
+.I "-v pvkfile"
+The Private Key File (pvk) that contains the private key used to digitally 
+sign the PE executable. This private key must match the public key inside the
+publisher X.509 certificate.
+.TP
+.I "-a md5 | sha1"
+The hash algorithm used in the digital signature of the PE executable. The 
+default algorithm is MD5.
+.TP
+.I "-$ individual | commercial"
+Add information about the publisher, i.e. if the signature is generated by an
+individual or a commercial entity.
+.TP
+.I "-n description"
+Add a textual description of the signed file.
+.TP
+.I "-i url"
+Add a URL associated to the publisher or the signed file.
+.TP
+.I "-t url"
+URL to a timestamp service to countersign the PE executable. Countersignature
+is required if you want the PE executable signature to be valid after the
+publisher certificate expires. The countersignature proves that the publisher
+had a valid (non-expired) certificate when the PE executable was signed.
+.TP
+.I "-tr #"
+Number of retries to get a timestamp for the countersignature.
+.TP
+.I "-td #"
+Delay (in seconds) between the retries to get a timestamp for the countersignature.
+.TP
+.I "-k name"
+CryptoAPI key container name (when not using -v).
+.TP
+.I "-p name"
+CryptoAPI provider name (when not using -v).
+.TP
+.I "-y #"
+CryptoAPI provider type (when not using -v or -p).
+.TP
+.I "-ky signature | exchange | #"
+CryptoAPI key type (when not using -v).
+.TP
+.I "-r localMachine | currentUser"
+CryptoAPI key location (when not using -v).
+.TP
+.I "-help", "-h", "-?", "/?"
+Display help about this tool.
+.SH AUTHOR
+Written by Sebastien Pouliot
+.SH COPYRIGHT
+Copyright (C) 2003 Motus Technologies. 
+Released under BSD license.
+.SH MAILING LISTS
+Visit http://mail.ximian.com/mailman/mono-list for details.
+.SH WEB SITE
+Visit: http://www.go-mono.com for details
+.SH SEE ALSO
+.BR chktrust(1), makecert(1), cert2spc(1)

man/sn.1

@@ -0,0 +1,117 @@
+.\" 
+.\" sn manual page.
+.\" Copyright 2003 Motus Technologies
+.\" Author:
+.\"   Sebastien Pouliot ([email protected])
+.\"
+.TH Mono "sn"
+.SH NAME
+sn \- Digitally sign/verify/compare strongname on CLR assemblies.
+.SH SYNOPSIS
+.PP
+.B sn [-q | -quiet] [options] [parameters]
+.SH DESCRIPTION
+Digitally sign, verify or compare, CLR assemblies using strongnames. 
+.SH CONFIGURATION OPTIONS
+.TP
+.I "-c provider"
+Change the default CSP (Crypto Service Provider).
+.TP
+.I "-m [y|n]"
+Use a machine [y] key container or a user [n] key container.
+.TP
+.I "-Vl"
+List the verification options.
+.TP
+.I "-Vr assembly [userlist]"
+Exempt the specified assembly from verification for the specified user list.
+.TP
+.I "-Vu assembly"
+Remove the exemption entry for the specified assembly.
+.TP
+.I "-Vx"
+Remove all exemptions entries.
+.SH CSP RELATED OPTIONS
+.TP
+.I "-d container"
+Delete the keypair present in the specified key container.
+.TP
+.I "-i keypair.snk container"
+Import the specified strongname file into the specified container.
+.TP
+.I "-pc container publickey"
+Export the public key from the specified CSP container to the specified file.
+.SH CONVERTION OPTIONS
+.TP
+.I "-e assembly output.pub"
+Export the assembly public key to the specified output file.
+.TP
+.I "-p keypair.snk output.pub"
+Export the public key from the specified strongname key file (SNK) to the 
+specified output file.
+.TP
+.I "-o input output.txt"
+Convert the input file to a CSV file (using decimal).
+.TP
+.I "-oh input output.txt"
+Convert the input file to a CSV file (using hexadecimal).
+.SH STRONGNAME SIGNING OPTIONS
+.TP
+.I "-D assembly1 assembly2"
+Compare if assembly1 and assembly are the same exception for their signature.
+This is done by comparing the hash of the metadata of both assembly.
+.TP
+.I "-k keypair.snk"
+Create a new strongname keypair in the specified file.
+.TP
+.I "-R assembly keypair.snk"
+Resign the specified assembly using the specified strongname keypair file 
+(SNK).
+.TP
+.I "-Rc assembly container"
+Resign the specified assembly using the specified strongname container.
+.TP
+.I "-t file"
+Show the public key from the specified file.
+.TP
+.I "-tp file"
+Show the public key and the public key token from the specified file.
+.TP
+.I "-T assembly"
+Show the public key from the specified assembly.
+.TP
+.I "-Tp assembly"
+Show the public key and the public key token from the specified assembly.
+.TP
+.I "-V assembly"
+Verify the specified assembly signature.
+.TP
+.I "-Vf assembly"
+Verify the specified assembly signature (even if disabled).
+.SH HELP OPTIONS
+.TP
+.I "-h", "-?"
+Display basic help about this tool.
+.TP
+.I "-h config", "-? config"
+Display configuration related help about this tool.
+.TP
+.I "-h csp", "-? csp"
+Display Cryptographic Service Provider related help about this tool.
+.TP
+.I "-h convert", "-? convert"
+Display convertion related help about this tool.
+.TP
+.I "-h sn", "-? sn"
+Display strongname related help about this tool.
+.SH AUTHOR
+Written by Sebastien Pouliot
+.SH COPYRIGHT
+Copyright (C) 2003 Motus Technologies. 
+Released under BSD license.
+.SH MAILING LISTS
+Visit http://mail.ximian.com/mailman/mono-list for details.
+.SH WEB SITE
+Visit: http://www.go-mono.com for details
+.SH SEE ALSO
+.BR secutil(1)