#! /bin/sh

set -eu

OPENSSL_CONF="$1"; shift
P11_PROVIDER="$1"; shift
SIGFILE="$1"; shift
TEXT="$1"; shift

tokenurl="$(p11tool --login --provider=$P11_PROVIDER --list-token-urls)"
echo $TEXT | \
    openssl dgst -sha256 -engine pkcs11 -keyform ENGINE -sign "$tokenurl" \
	    -out $SIGFILE