qssign1
An utility to sign and verify the integrity of log data.
Usage
qssign {-s | S
<secret>
[-e]
[-v]
[-u
<name>]
[-f
<regex>]
[{-a
'sha1' | 'sha256'}]}
Overview
qssign is a log data integrity check tool. It reads log data from stdin (pipe) and writes the data to stdout adding a sequence number and signatur to ever log line.
Options
-
-s <secret> -
Passphrase used to calculate signature.
-
-S <program> -
Specifies a program which writes the passphrase to stdout.
-
-e -
Writes start/end marker when starting/stopping data signing.
-
-v -
Verification mode checking the integrity of signed data.
-
-u <name> -
Becomes another user, e.g. www-data.
-
-f <regex> -
Filter pattern (case sensitive regular expression) for messages which do not need to be signed.
-
-a 'sha1'|'sha256' -
Specifes the algorithm to use. Default is sha1.
Examples
Sign:
TransferLog "|/usr/bin/qssign -s password -e |/usr/bin/qsrotate -o /var/log/apache/access.log"
Verify:
cat access.log | qssign -s password -v
Releases
6 releases since Debian 7 (Wheezy); the text changed 4 times.
-a since Debian 9 (Stretch);
-f since Debian 9 (Stretch);
-u since Debian 9 (Stretch).