secsipidx - CLI tool and HTTP API server to check or build SIP
identity headers
Command line application to check or build SIP identity headers as
per IETF RFC8224 and RFC8588 (STIR and SHAKEN). It also can be run in daemon
mode, providing HTTP REST API to ease the adoption of STIR and SHAKEN by
external applications.
- -H, -http-srv
- http server bind address
- -https-srv
- https server bind address
- -https-pubkey
- https server public key
- -https-prvkey
- https server private key
- -http-dir
- directory to serve over http
- -k, -fprvkey
- path to private key
- -p, -fpubkey
- path to public key
- path to file with header value in JSON format
- header value in JSON format
- -fpayload
- path to file with payload value in JSON format
- -payload
- payload value in JSON format
- -fidentity
- path to file with identity value
- -identity
- identity value
- -alg
- encryption algorithm (default: ES256)
- -ppt
- used extension (default: shaken)
- -typ
- token type (default: passport)
- -x5u
- value of the field with the location of the certificate used to sign the
token (default: '')
- -a, -attest
- attestation level (default: 'C')
- -d, -dest-tn
- destination (called) number (default: '')
- -o, -orig-th
- origination (calling) number (default: '')
- -iat
- timestamp when the token was created
- -orig-id
- origination identifier (default: '')
- -c, -check
- check validity of the signature
- -s, -sign
- sign the header and payload
- -S, -sign-full
- sign the header and payload, with parameters
- -json-parse
- parse and re-serialize JSON header and payaload values
- -expire
- duration of token validity (in seconds)
- -timeout
- http get timeout (in seconds, default: 3)
- -l, -ltest
- run local basic test
- -version
- print version
- -cache-dir
- path to the directory with cached certificates (default: '')
- -cache-expire
- duration of cached certificates (in seconds, default 3600)
- -ca-file
- file with root CA certificates in pem format
- -ca-inter
- file with intermediate CA certificates in pem format
- -cert-verify
- certificate verification mode (default: 0)
- -crl-file
- file with CRL
This manual page was written by Victor Seva
<vseva@debian.org>, for the Debian project (and may be used by
others).