dcmsign(1) OFFIS DCMTK dcmsign(1) (NAME) dcmsign - (DICOM) (SYNOPSIS) dcmsign [options] dcmfile-in [dcmfile-out] (DESCRIPTION) dcmsign (dcmfile-in) (dcmfile-out) . : o o o o o . (PARAMETERS) dcmfile-in ("-" ) dcmfile-out ("-" ) (OPTIONS) (general options) -h --help --version --arguments -q --quiet -v --verbose -d --debug -ll --log-level [l]evel: string constant (fatal, error, warn, info, debug, trace) l -lc --log-config [f]ilename: string f (input options) : +f --read-file () +fo --read-file-only -f --read-dataset : -t= --read-xfer-auto () -td --read-xfer-detect -te --read-xfer-little VR little endian -tb --read-xfer-big VR big endian -ti --read-xfer-implicit VR little endian UN : -uc --retain-un UN () +uc --convert-un VR (signature commands) --verify () +s --sign [p]rivate key file, [c]ertificate file: string +si --sign-item [k]eyfile, [c]ertfile, [i]tem location: string +t --insert-timestamp ts[q]file, ts[r]file [u]idfile: string r q UID u +r --remove [s]ignature UID: string +ra --remove-all (general signature options) : -pem --pem-keys / PEM () -der --der-keys / DER : -fn --format-new () -fo --format-old DCMTK ( 3.5.4) . . ( --verify) (signature verification options) : +rv --verify-if-present () +rg --require-sig +rc --require-creator RSA +ru --require-auth RSA +rs --require-sr RSA (SR) : +tv --verify-ts () -tv --ignore-ts +tr --require-ts (CA): +cf --add-cert-file [f]ilename: string +uf --add-ucert-file [f]ilename: string +cd --add-cert-dir [d]irectory: string d +cr --add-crl-file [f]ilename: string ( --enable-crl-vfy) +cl --enable-crl-vfy (CRL) ( --sign --sign-item) (signature creation options) : +ps --std-passwd () +pw --use-passwd [p]assword: string -pw --null-passwd : -pf --profile-none () +pb --profile-base RSA +pc --profile-creator RSA +pa --profile-auth +pr --profile-sr RSA (SR) +pv --profile-srv RSA () MAC: +mr --mac-ripemd160 RIPEMD 160 () +ms --mac-sha1 SHA-1 +mm --mac-md5 MD5 +m2 --mac-sha256 SHA-256 +m3 --mac-sha384 SHA-384 +m5 --mac-sha512 SHA-512 : +lp --list-purposes -sp --no-sig-purpose () +sp --sig-purpose [p]urpose code: integer (1..18) p : -t --tag [t]ag: "gggg,eeee" ( ) -tf --tag-file [f]ilename: string ( --sign --sign-item) (timestamp creation options) : -ts --timestamp-off () +ts --timestamp-file [t]sq-filename, [u]id-filename: string t uid u MAC ( --timestamp-file): +tm2 --ts-mac-sha256 SHA-256 () +tm3 --ts-mac-sha384 SHA-384 +tm5 --ts-mac-sha512 SHA-512 +tmr --ts-mac-ripemd160 RIPEMD 160 +tms --ts-mac-sha1 SHA-1 ( ) +tmm --ts-mac-md5 MD5 ( ) (Nonce) ( --timestamp-file): +tn --ts-use-nonce () -tn --ts-no-nonce ( --timestamp-file): +tc --ts-request-cert TSA () -tc --ts-no-cert TSA ( --timestamp-file): -tp --ts-no-policy () +tp --ts-policy [p]olicy-OID: string p (output options) : +t= --write-xfer-same () +te --write-xfer-little VR little endian +tb --write-xfer-big VR big endian +ti --write-xfer-implicit VR little endian : +e --length-explicit () -e --length-undefined : +d --dump [f]ilename: string MAC ( --sign --sign-item) (NOTES) (Files and Parameters) dcmsign . X.509v3 PEM DER . dcmsign RSA DSA RSA . PEM DER . PEM ( ) . ( "ps -ef") . dcmsign . ( ) . . : --tag "gggg,eeee" gggg eeee --tag "Name" 'Name' . --tag-file . (gggg,eeee) ( ) . . . --sign-item . : SequenceName[index].SequenceName[index].SequenceName[index](...) SequenceName (gggg,eeee) index . : ReferencedSeriesSequence[0].ReferencedImageSequence[1] ReferencedImageSequence (0008,1140) ReferencedSeriesSequence (0008,1115) . (Certified Timestamps) 3.6.6 dcmsign RFC 3161 . (TSQ) --insert-timestamp (TSR) . --ignore- ts . . --add-cert-file --add-cert-dir --add- ucert-file --add-crl-file . (Hashed Certificate Directories) CA (CRL) --add- cert-dir dcmsign . CRL PEM hash.N hash.rN CRL . : openssl x509 -hash -noout -in ( ) openssl crl -hash -noout -in ( CRL) .N .rN CRL . . CRL --enable- crl-vfy . (LOGGING) . . --verbose . --debug . --quiet . --log-config . /logger.cfg . (COMMAND LINE) : (0-1) (1-n) 0 n . '+' '-' . . . '@' ( @command.txt). . (EXIT CODES) dcmsign : (general) EXITCODE_NO_ERROR 0 EXITCODE_COMMANDLINE_SYNTAX_ERROR 1 EXITCODE_NOOPENSSL 5 (input file errors) EXITCODE_CANNOT_READ_INPUT_FILE 20 EXITCODE_NO_INPUT_FILES 21 EXITCODE_CANNOT_READ_TAG_FILE 30 EXITCODE_CANNOT_READ_TSQ_FILE 31 EXITCODE_CANNOT_READ_TSR_FILE 32 EXITCODE_CANNOT_READ_UID_FILE 33 (output file errors) EXITCODE_CANNOT_WRITE_OUTPUT_FILE 40 EXITCODE_CANNOT_WRITE_SUPPORT_FILE 46 (processing errors) EXITCODE_CANNOT_ACCESS_SIGNATURE 80 EXITCODE_CANNOT_ACCESS_TS 81 EXITCODE_CANNOT_INSERT_TS 82 EXITCODE_SIGNATURE_REMOVAL_FAILED 83 EXITCODE_SIGNATURE_UID_NOT_FOUND 84 EXITCODE_SIGNATURE_CREATION_FAILED 85 EXITCODE_SYNTAX_ERROR_IN_TAG_FILE 86 EXITCODE_TS_CONSISTENCY_CHECK_FAILED 87 (application specific errors) EXITCODE_NO_SIGNATURES_PRESENT 100 EXITCODE_SIGNATURE_VERIFICATION_FAILED 101 EXITCODE_SIGNATURE_VERIFICATION_POLICY 102 (ENVIRONMENT) dcmsign DCMDICTPATH . DCMDICTPATH /dicom.dic . (COPYRIGHT) Copyright (C) 2000-2025 by OFFIS e.V., Escherweg 2, 26121 Oldenburg, Germany. Version 3.7.0 Thu Jul 9 2026 18:43:40 dcmsign(1)