GZSIG(1)                   OpenBSD Reference Manual                   GZSIG(1)

NAME
     gzsig - gzip signing utility

SYNOPSIS
     gzsig sign [-q] [-f secret_file] privkey [file ...]
     gzsig verify [-q] [-f secret_file] pubkey [file ...]

DESCRIPTION
     gzsig embeds or verifies RSA PKCS #1 v2.0 or DSA SHA1 signatures in
     gzip(1) compressed files using SSH identity keys or X509 certificates.

     The file operands are processed in command-line order.  If file is a sin-
     gle dash (`-') or absent, gzsig reads from the standard input.

     The options are as follows:

     -f secret_file
             Indicates that the passphrase for the key should be read from
             secret_file instead of being supplied manually.

     -q      Enable quiet mode.

     sign    Sign the input using the private key in privkey.

     verify  Verify the signature using the public key in pubkey.

     The gzsig utility exits 0 on success, and >0 if an error occurs.

EXAMPLES
     Sign file1 and file2 with the SSH2 identity key in ~/.ssh/id_rsa:

           $ gzsig sign ~/.ssh/id_rsa file1 file2

     Sign file1 with the SSH2 identity key, saving the signed file in file2:

           $ gzsig sign ~/.ssh/id_rsa <file1 >file2

     Verify the signature on file1 using the SSL certificate in
     /etc/ssl/server.crt:

           $ gzsig verify /etc/ssl/server.crt <file1

SEE ALSO
     gzip(1), ssh-keygen(1), ssl(8)

AUTHORS
     Dug Song <dugsong@arbor.net>.  SSH2 support by Marius Eriksen
     <marius@openbsd.org>.

OpenBSD 4.7                     January 2, 2010                              1
