Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   23457 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

xip(1)			  BSD General Commands Manual			xip(1)

NAME
     xip — Create a signed archive for secure distribution

SYNOPSIS
     xip [options] --sign identity input-file ... output-archive

DESCRIPTION
     The xip tool archives one or more files or directories into a signed XIP
     file. A XIP file is an analog to zip(1), but allows for a digital signa‐
     ture to be applied and verified on the receiving system, before the ar‐
     chive is expanded. When a XIP file is opened (by double-clicking), Ar‐
     chive Utility will automatically expand it (but only if the digital sig‐
     nature is intact).

     To create a XIP file, you will need to have a certificate and correspond‐
     ing private key -- together called an “identity” -- in one of your acces‐
     sible keychains. To add a signature, specify the name of the identity
     using the --sign option. The identity's name is the same as the “Common
     Name” of the certificate.

     If you want to search for the identity in a specific keychain, specify
     the path to the keychain file using the --keychain option. Otherwise, the
     default keychain search path is used.

     xip will embed the signing certificate in the XIP file, as well as any
     intermediate certificates that are found in the keychain.

     The signature can optionally include a trusted timestamp. This is enabled
     by default when signing with a Developer ID identity, but it can be
     enabled explicitly using the --timestamp option. A timestamp server must
     be contacted to embed a trusted timestamp. If you aren't connected to the
     Internet, you can use --timestamp=none to disable timestamps, even for a
     Developer ID identity.

ARGUMENTS AND OPTIONS
     --sign identity-name
		 The name of the identity to use for signing the archive.

     --keychain keychain-path
		 Specify a specific keychain to search for the signing iden‐
		 tity.

     --timestamp
		 Include a trusted timestamp with the signature.

     --timestamp=none
		 Disable trusted timestamp, regardless of identity.

     input-file ...
		   The path to one or more files or directories to be
		   archived.

     output-archive
		   The path to which the signed archive will be written.

Mac OS			      September 23, 2011			Mac OS

Vote for polarhome