1 .\"
   2 .\" CDDL HEADER START
   3 .\"
   4 .\" The contents of this file are subject to the terms of the
   5 .\" Common Development and Distribution License (the "License").
   6 .\" You may not use this file except in compliance with the License.
   7 .\"
   8 .\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
   9 .\" or http://www.opensolaris.org/os/licensing.
  10 .\" See the License for the specific language governing permissions
  11 .\" and limitations under the License.
  12 .\"
  13 .\" When distributing Covered Code, include this CDDL HEADER in each
  14 .\" file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  15 .\" If applicable, add the following below this CDDL HEADER, with the
  16 .\" fields enclosed by brackets "[]" replaced with your own identifying
  17 .\" information: Portions Copyright [yyyy] [name of copyright owner]
  18 .\"
  19 .\" CDDL HEADER END
  20 .\"
  21 .\" Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
  22 .\" Use is subject to license terms.
  23 .\"
  24 .TH signproto 1ONBLD "13 June 2007"
  25 .SH NAME
  26 .I signproto
  27 \- sign ELF objects in proto area
  28 .SH SYNOPSIS
  29 \fBsignproto \fIcred_file\fP
  30 .LP
  31 .SH DESCRIPTION
  32 .IX "OS-Net build tools" "signproto" "" "\fBsignproto\fP"
  33 .LP
  34 .I signproto
  35 finds ELF objects in the ON proto area and re-signs them
  36 using 
  37 .IR signit (1ONBLD).
  38 This operation is normally invoked only for
  39 release builds, as it replaces the internal development
  40 signatures with official Sun signatures. The actual signing using
  41 Sun's private key is performed by a code signing server which
  42 is accessed via
  43 .IR signit .
  44 .LP
  45 Cryptographic modules are identified by examining the signature
  46 embedded by
  47 .IR elfsign (1)
  48 during the build process. 
  49 .I signproto
  50 requires a single command-line argument, which is a file containing
  51 the mapping between each signing server credential name and the Subject
  52 Distinguished Name (DN) of the certificate used to 
  53 sign the ELF file. Each line in the file contains a credential name
  54 followed by a regular expression. The first regular expression that
  55 matches the Subject DN embedded in the ELF file determines the 
  56 credential name passed to
  57 .I signit
  58 to re-sign the file.
  59 .LP
  60 .SH ENVIRONMENT
  61 .LP
  62 .TP 4
  63 .B CODESIGN_USER
  64 Login name for the code signing server passed to
  65 .I signit .
  66 If this variable is not set, the value in LOGNAME is used instead.
  67 .LP
  68 .TP 4
  69 .B ROOT
  70 Location of ON proto area containing files to be signed.
  71 .LP
  72 .SH SEE ALSO
  73 .LP
  74 signit(1ONBLD), elfsign(1)