Netscape MANAGEMENT SYSTEM 6.0 - COMMAND-LINE Manual page 101

Table 13-1 Description of options
-M
--norecurse
-o
--outfile outputfile
-p password
-s keysize
-t token
-v archive
--verbosity value
-w archive
-x directory
Lists the PKCS #11 modules available to signtool, including smart cards.
The -M option is available in Netscape Signing Tool 1.0 and later versions only.
For information on using Netscape Signing Tool with smart cards, see "Using
Netscape Signing Tool with Smart Cards" on page 106.
For information on using the -M option to verify FIPS-140-1 validated mode, see
"Netscape Signing Tool and FIPS-140-1" on page 109.
Blocks recursion into subdirectories when signing a directory's contents or
when parsing HTML.
Optimizes the archive for size. Use this only if you are signing very large
archives containing hundreds of files. This option makes the manifest files
(required by the JAR format) considerably smaller, but they contain slightly less
information.
Specifies a file to receive redirected output from Netscape Signing Tool.
Specifies a password for the private-key database. Note that the password
entered on the command line is displayed as plain text.
Specifies the size of the key for generated certificate. Use the -M option to find
out what tokens are available.
The -s option can be used with the -G option only.
Specifies which available token should generate the key and receive the
certificate. Use the -M option to find out what tokens are available.
The -t option can be used with the -G option only.
Displays the contents of an archive and verifies the cryptographic integrity of
the digital signatures it contains and the files with which they are associated.
This includes checking that the certificate for the issuer of the object-signing
certificate is listed in the certificate database, that the CA's digital signature on
the object-signing certificate is valid, that the relevant certificates have not
expired, and so on.
Sets the quantity of information Netscape Signing Tool generates in operation.
A value of 0 (zero) is the default and gives full information. A value of -1
suppresses most messages, but not error messages.
Displays the names of signers of any files in the archive.
Excludes the specified directory from signing. Note that with Netscape Signing
Tool version 1.1 and later this option can appear multiple times on one
command line, making it possible to specify several particular directories to
exclude.
SignTool Syntax and Options
Chapter 13 Netscape Signing Tool 101