#! /bin/sh

set -eu

OPENSSL_CONF="$1"; shift
P11_PROVIDER="$1"; shift
SIGFILE="$1"; shift
TEXT="$1"; shift

tokenurl="$(p11tool --login --provider=$P11_PROVIDER --list-token-urls)"
echo $TEXT | \
    openssl dgst -sha256 -engine pkcs11 -keyform ENGINE \
	    -prverify "$tokenurl" -signature $SIGFILE | egrep "^Verified OK$"